VULNERABILITY INTELLIGENCE

CVE-2026-56002

CVSS score8.5 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-07-08
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

Weakness classification

  • CWE-122: Heap-based Buffer Overflow

Primary references