rpm package
almalinux/libXfont2-devel
pkg:rpm/almalinux/libXfont2-devel
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-56003 | Hig | 8.5 | < 2.0.3-2.el8_10.1 | 2.0.3-2.el8_10.1 | Jul 8, 2026 | A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server. | |
| CVE-2026-56002 | Hig | 8.5 | < 2.0.6-5.el10_2.1 | 2.0.6-5.el10_2.1 | Jul 8, 2026 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server. | |
| CVE-2026-56001 | Hig | 8.5 | < 2.0.6-5.el10_2.1 | 2.0.6-5.el10_2.1 | Jul 8, 2026 | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont |
- affected < 2.0.3-2.el8_10.1fixed 2.0.3-2.el8_10.1
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
- affected < 2.0.6-5.el10_2.1fixed 2.0.6-5.el10_2.1
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
- affected < 2.0.6-5.el10_2.1fixed 2.0.6-5.el10_2.1
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont