CVE-2026-45516
In tt_var_load_item_variation_store of ttgxvar.c, there is a possible out of bounds read due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVASB-A-503542587 No score
In tt_var_load_item_variation_store of ttgxvar.c, there is a possible out of bounds read due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-503542587- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/external/freetypeAndroid |
17-next:0 up to 17-next:2026-10-01, plus listed versions 17-next |
17-next:2026-10-01 |
platform/external/freetypeAndroid |
15:0 up to 15:2026-10-01, plus listed versions 15 |
15:2026-10-01 |
platform/external/freetypeAndroid |
16:0 up to 16:2026-10-01, plus listed versions 16 |
16:2026-10-01 |
platform/external/freetypeAndroid |
16-qpr2:0 up to 16-qpr2:2026-10-01, plus listed versions 16-qpr2 |
16-qpr2:2026-10-01 |
platform/external/freetypeAndroid |
17:0 up to 17:2026-10-01, plus listed versions 17 |
17:2026-10-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts, references | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-45516 is a vulnerability with no CVSS score yet in platform/external/freetype, published October 1, 2026. No source lists public exploit code. Fixed in platform/external/freetype 17-next:2026-10-01.