Medium severity6.5OSV Advisory· Published Jul 7, 2026· Updated Jul 9, 2026

CVE-2026-50811

Description

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates

Affected products

FreeType/FreetypeOSV2 versions
VER-2-14-3, VER-2-14-2, VER-2-14-1, …+ 1 more
- (no CPE)range: VER-2-14-3, VER-2-14-2, VER-2-14-1, …
- (no CPE)range: <=2.14.3
osv-coords3 versions
pkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/freetype2&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/ft2demos&distro=openSUSE%20Leap%2016.0
< 2.14.3-160000.1.1+ 2 more
- (no CPE)range: < 2.14.3-160000.1.1
- (no CPE)range: < 2.14.3-1.1
- (no CPE)range: < 2.14.3-160000.1.1

Patches

Vulnerability mechanics

References

gist.github.com/junius-sec/6dd0fb25b643f89914083a38e5e57acenvd
github.com/freetype/freetype/commit/5a280ecde6f324de0d226261036e736e0cb49a71nvd
gitlab.freedesktop.org/freetype/freetype/-/commit/5a280ecde6f324de0d226261036e736e0cb49a71nvd
gitlab.freedesktop.org/freetype/freetype/-/issues/1436nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000