X.Org Libxfont2 vulnerabilities

3 vulnerabilities

Known vulnerabilities in X.Org Libxfont2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-56002debianlibxfont+4
EPSS score
0.43%
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.8.8CVE-2026-56003debianlibxfont+4
EPSS score
0.40%
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.8.8CVE-2026-56001debianlibxfont+4
EPSS score
0.39%
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont