libxfont vulnerabilities

CVEs whose affected-version data names the libxfont package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-56002High· 8.5

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

▾ Twilightx · libxfontEPSS 0.43%via NVD

libxfont vulnerabilities (CVEs) · VulnSea