Every CVE Search/ Get API key

CVE-2011-2895

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org...

9.3 HighFix available

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Exploit likelihood

8.36%Up 3.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
CVE-2011-2895
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
CVE-2011-2895
Updated
2026-11-02
EUVDEUVD-2011-2868 No score

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
EUVD-2011-2868
Updated
2026-11-03
GitHub AdvisoriesGHSA-8hvp-h85w-jwq9 No score

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org...

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
GHSA-8hvp-h85w-jwq9
Weakness
CWE-119
Updated
2026-11-02
OSV No score

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
CVE-2011-2895
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2895 No score

The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.

Record
DEBIAN-CVE-2011-2895
Updated
2026-11-02
OSVopenSUSE-SU-2024:10169-1 No score

xorg-x11-devel-7.6-47.2 on GA media

These are all security issues fixed in the xorg-x11-devel-7.6-47.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10169-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10299-1 No score

libXfont-devel-1.5.2-1.1 on GA media

These are all security issues fixed in the libXfont-devel-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10299-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxfont
Debian:12
 before 1:1.4.4-1
1:1.4.4-1
libxfont
Debian:13
 before 1:1.4.4-1
1:1.4.4-1
libxfont
Debian:14
 before 1:1.4.4-1
1:1.4.4-1
libxfont
Debian:5.0
 before 1:1.3.3-2, plus listed versions
1:1.3.3-1
1:1.3.3-2
libxfont
Debian:6.0
 before 1:1.4.1-3, plus listed versions
1:1.4.1-2
1:1.4.1-3
libXfont
Red Hat:enterprise_linux:5::client
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
Show 101 moreShow less
Affected packages
PackageAffectedFixed
libXfont
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont-devel
Red Hat:enterprise_linux:5::server
 before 0:1.2.2-1.0.4.el5_7
0:1.2.2-1.0.4.el5_7
libXfont
Red Hat:enterprise_linux:6::server
 before 0:1.4.1-2.el6_1
0:1.4.1-2.el6_1
libXfont-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.4.1-2.el6_1
0:1.4.1-2.el6_1
libXfont-devel
Red Hat:enterprise_linux:6::server
 before 0:1.4.1-2.el6_1
0:1.4.1-2.el6_1
xorg-x11
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGL
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGLU
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xdmx
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xnest
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xvfb
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs-devel
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-devel
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-doc
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-font-utils
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-libs
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-sdk
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-tools
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-twm
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xauth
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xdm
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xfs
Red Hat:enterprise_linux:4::as
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGL
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGLU
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xdmx
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xnest
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xvfb
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs-devel
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-devel
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-doc
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-font-utils
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-libs
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-sdk
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-tools
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-twm
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xauth
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xdm
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xfs
Red Hat:enterprise_linux:4::desktop
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGL
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGLU
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xdmx
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xnest
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xvfb
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs-devel
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-devel
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-doc
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-font-utils
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-libs
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-sdk
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-tools
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-twm
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xauth
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xdm
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xfs
Red Hat:enterprise_linux:4::es
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGL
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Mesa-libGLU
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xdmx
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xnest
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-Xvfb
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-deprecated-libs-devel
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-devel
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-doc
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-font-utils
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-libs
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-sdk
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-tools
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-twm
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xauth
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xdm
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
xorg-x11-xfs
Red Hat:enterprise_linux:4::ws
 before 0:6.8.2-1.EL.69
0:6.8.2-1.EL.69
freetype
Red Hat:enterprise_linux:4::as
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-demos
Red Hat:enterprise_linux:4::as
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-devel
Red Hat:enterprise_linux:4::as
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-utils
Red Hat:enterprise_linux:4::as
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-demos
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-utils
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype
Red Hat:enterprise_linux:4::es
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-demos
Red Hat:enterprise_linux:4::es
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-devel
Red Hat:enterprise_linux:4::es
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-utils
Red Hat:enterprise_linux:4::es
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype
Red Hat:enterprise_linux:4::ws
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-demos
Red Hat:enterprise_linux:4::ws
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
freetype-utils
Red Hat:enterprise_linux:4::ws
 before 0:2.1.9-19.el4
0:2.1.9-19.el4
libXfont
Red Hat:rhel_eus:5.6
 before 0:1.2.2-1.0.3.el5_6
0:1.2.2-1.0.3.el5_6
libXfont-debuginfo
Red Hat:rhel_eus:5.6
 before 0:1.2.2-1.0.3.el5_6
0:1.2.2-1.0.3.el5_6
libXfont-devel
Red Hat:rhel_eus:5.6
 before 0:1.2.2-1.0.3.el5_6
0:1.2.2-1.0.3.el5_6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2895 is a high vulnerability (CVSS 9.3) in Freebsd, published August 12, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.36%, the 94th percentile. Fixed in libxfont 1:1.4.4-1.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open