Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-56001

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont
CVE-2026-56002

libXfont2 PCF Font Parsing Heap Buffer Overflow

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont Libxfont2
CVE-2026-56003

libXfont2 computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
X X.org
Products
Libxfont Libxfont Libxfont2
CVE-2007-1352

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

CVSS 2.0 · 3.8 Low EPSS 1.5% KEV · Not listed
Vendors
Mandrakesoft Openbsd Redhat and 5 more
Products
Mandrake Linux Mandrake Linux Corporate Server Mandrake Multi Network Firewall and 11 more
CVE-2007-1351

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

CVSS 2.0 · 8.5 High EPSS 5.6% KEV · Not listed
Vendors
Mandrakesoft Openbsd Redhat and 4 more
Products
Mandrake Linux Mandrake Linux Corporate Server Mandrake Multi Network Firewall and 8 more
CVE-2017-13722

libXfont: Insufficient input validation in pcfread.c

In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxfont
CVE-2017-13720

libXfont: Insufficient input validation in fontdir.c

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
X.org
Products
Libxfont