USN-8560-1: libxfont Ubuntu
Vulnerability summary
USN-8560-1 is a vulnerability in libxfont Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 3Timeline
- 20-07-2026PublishedVulnerability first disclosed.
- 21-07-2026Last modifiedVulnerability information updated.
Description
libxfont vulnerabilities It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56001) It was discovered that libXfont did not properly check glyph bounds when reading PCF fonts, leading to a heap buffer overflow. An authenticated X client could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56002) It was discovered that libXfont did not properly check the size of the property buffer when parsing PCF fonts, leading to a heap buffer overflow. An authenticated X client could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56003)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- libxfont< 1:1.4.7-1ubuntu0.4+esm2 | < 1:1.5.1-1ubuntu0.16.04.4+esm2 | < 1:2.0.3-1ubuntu0.1~esm2 | < 1:2.0.3-1ubuntu0.20.04.1~esm2 | < 1:2.0.5-1ubuntu0.2 | < 1:2.0.6-1+deb13u1build0.24.04.2 | < 1:2.0.6-2ubuntu0.2
1 vendor · 1 product