CVE-2026-56002

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them. contains runtime library.

Security Fix(es):

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server context.(CVE-2026-56001)

A heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.(CVE-2026-56003)

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

• libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

X.Org X11 libXfont2 runtime library

Security Fix(es):

• libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
• libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
• libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.

The updated packages fix security vulnerabilities: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow. (CVE-2026-56001) PCF Font Parsing Heap Buffer Overflow. (CVE-2026-56002) computeProps Property Buffer Heap Buffer Overflow. (CVE-2026-56003)

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed.

This update for libXfont2 fixes the following issues

• CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018).
• CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019).
• CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow (bsc#1269020).

Root has patched CVE-2026-56002 in the libxfont package for Root:Debian:11. Multiple fixed versions available.

This update for libXfont2 fixes the following issues

• CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (bsc#1269018).
• CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow (bsc#1269019).
• CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow (bsc#1269020).

This update for libXfont2 fixes the following issues

• CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflow (bsc#1269018).
• CVE-2026-56002: insufficient checks in pcfReadFont can lead to a heap buffer overflow (bsc#1269019).
• CVE-2026-56003: missing bounds check in ComputeScaledProperties can lead to a heap buffer overflow (bsc#1269020).

This update for libXfont2 fixes the following issues

• CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflow (bsc#1269018).
• CVE-2026-56002: insufficient checks in pcfReadFont can lead to a heap buffer overflow (bsc#1269019).
• CVE-2026-56003: missing bounds check in ComputeScaledProperties can lead to a heap buffer overflow (bsc#1269020).

It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56001)

It was discovered that libXfont did not properly check glyph bounds when reading PCF fonts, leading to a heap buffer overflow. An authenticated X client could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56002)

It was discovered that libXfont did not properly check the size of the property buffer when parsing PCF fonts, leading to a heap buffer overflow. An authenticated X client could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-56003)