{"id":"CVE-2026-95512","aliases":["AZL-107396","AZL-107859","BELL-CVE-2026-95512","DEBIAN-CVE-2026-95512","EUVD-2026-91327","GHSA-m5vf-r2p2-8m29","MGASA-2026-0547","RHSA-2026:74952","UBUNTU-CVE-2026-95512","USN-8881-1"],"status":"published","title":"Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00181,"percentile":0.07769,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-10-02T00:00:00Z","modified":"2026-11-07T14:17:34Z","fixes":[{"ecosystem":"Azure Linux:3","package":"freetype","fixed_in":["2.13.2-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"freetype","fixed_in":["2.13.3-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"freetype","fixed_in":["2.13.3-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"freetype","fixed_in":["2.14.3-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"freetype","fixed_in":["2.13.3-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"freetype","fixed_in":["2.13.3-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"freetype","fixed_in":["2.14.3-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freetype","fixed_in":["2.14.3+dfsg-3"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"freetype2","fixed_in":["2.14.2-1.3.mga10","2.14.2-1.3.mga10.tainted"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"freetype","fixed_in":["0:2.14.3-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"freetype-demos","fixed_in":["0:2.14.3-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"freetype-devel","fixed_in":["0:2.14.3-2.1.hum1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freetype","fixed_in":["2.11.1+dfsg-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"freetype","fixed_in":["2.13.2+dfsg-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"freetype","fixed_in":["2.14.2+dfsg-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.3-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.1-r0"},{"fixed":"2.13.3-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.3-r0"},{"fixed":"2.13.3-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0-r6"},{"fixed":"2.14.3-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.1-r0"},{"fixed":"2.13.3-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.3-r0"},{"fixed":"2.13.3-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0-r6"},{"fixed":"2.14.3-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.1+dfsg-5","2.12.1+dfsg-5+deb12u1","2.12.1+dfsg-5+deb12u2","2.12.1+dfsg-5+deb12u3","2.12.1+dfsg-5+deb12u4","2.13.0+dfsg-1","2.13.1+dfsg-1","2.13.2+dfsg-1","2.13.3+dfsg-1","2.14.1+dfsg-1","2.14.1+dfsg-2","2.14.2+dfsg-1","2.14.3+dfsg-1","2.14.3+dfsg-2","2.14.3+dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.13.3+dfsg-1","2.13.3+dfsg-1+deb13u1","2.14.1+dfsg-1","2.14.1+dfsg-2","2.14.2+dfsg-1","2.14.3+dfsg-1","2.14.3+dfsg-2","2.14.3+dfsg-3"]},{"source":"osv","ecosystem":"Debian:14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.3+dfsg-3"}]}],"versions":["2.13.3+dfsg-1","2.14.1+dfsg-1","2.14.1+dfsg-2","2.14.2+dfsg-1","2.14.3+dfsg-1","2.14.3+dfsg-2"]},{"source":"osv","ecosystem":"Mageia:10","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.3.mga10"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.3.mga10.tainted"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-2.1.hum1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.12-0ubuntu1","2.5.0.1-0ubuntu2","2.5.1-1ubuntu1","2.5.1-1ubuntu2","2.5.1-2ubuntu1","2.5.2-1ubuntu1","2.5.2-1ubuntu2","2.5.2-1ubuntu2.1","2.5.2-1ubuntu2.2","2.5.2-1ubuntu2.3","2.5.2-1ubuntu2.4","2.5.2-1ubuntu2.5","2.5.2-1ubuntu2.6","2.5.2-1ubuntu2.7","2.5.2-1ubuntu2.8","2.5.2-1ubuntu2.8+esm1","2.5.2-1ubuntu2.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.2-4ubuntu2","2.6.1-0.1ubuntu1","2.6.1-0.1ubuntu2","2.6.1-0.1ubuntu2.1","2.6.1-0.1ubuntu2.2","2.6.1-0.1ubuntu2.3","2.6.1-0.1ubuntu2.4","2.6.1-0.1ubuntu2.5","2.6.1-0.1ubuntu2.5+esm1","2.6.1-0.1ubuntu2.5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1","2.8.1-2ubuntu2.2","2.8.1-2ubuntu2.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1","2.10.1-2ubuntu0.2","2.10.1-2ubuntu0.3","2.10.1-2ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.4"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1","2.11.1+dfsg-1ubuntu0.1","2.11.1+dfsg-1ubuntu0.2","2.11.1+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2+dfsg-1ubuntu0.2"}]}],"versions":["2.13.1+dfsg-1","2.13.2+dfsg-1","2.13.2+dfsg-1build2","2.13.2+dfsg-1build3","2.13.2+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2+dfsg-1ubuntu0.2"}]}],"versions":["2.13.3+dfsg-1build1","2.14.1+dfsg-1","2.14.1+dfsg-2","2.14.2+dfsg-1","2.14.2+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.4"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1","2.11.1+dfsg-1ubuntu0.1","2.11.1+dfsg-1ubuntu0.2","2.11.1+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2+dfsg-1ubuntu0.2"}]}],"versions":["2.13.1+dfsg-1","2.13.2+dfsg-1","2.13.2+dfsg-1build2","2.13.2+dfsg-1build3","2.13.2+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2+dfsg-1ubuntu0.2"}]}],"versions":["2.13.3+dfsg-1build1","2.14.1+dfsg-1","2.14.1+dfsg-2","2.14.2+dfsg-1","2.14.2+dfsg-1ubuntu0.1"]}],"products":[{"vendor":"red hat","product":"red hat build of openjdk 11 els"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:74952","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-95512","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462295","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9","tags":["fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95512","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m5vf-r2p2-8m29"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-95512","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95512.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-95512","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0547.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35642","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/06/1","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/10/13/1","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74952.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-95512","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2026-95512","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8881-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-95512","title":"Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:05:11.245Z","modified":"2026-11-06T02:13:57.273Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-06T03:26:01.286096Z"}],"euvd":[{"id":"EUVD-2026-91327","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:05:11Z","modified":"2026-11-06T02:13:57Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T03:02:58.554056Z"}],"ghsa":[{"id":"GHSA-m5vf-r2p2-8m29","title":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could...","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:31:21Z","modified":"2026-10-02T15:32:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:12:43.646433Z"}],"nvd":[{"id":"CVE-2026-95512","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:16:45.3Z","modified":"2026-11-06T03:16:46.98Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-06T06:59:05.647867Z"}],"osv":[{"id":"BELL-CVE-2026-95512","status":"published","published":"2026-10-03T06:05:05.986532Z","modified":"2026-10-10T07:15:05.081152568Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:27.468539Z"},{"id":"CVE-2026-95512","title":"Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:05:11.245Z","modified":"2026-11-07T07:06:33.537943414Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T03:08:12.44191Z"},{"id":"DEBIAN-CVE-2026-95512","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:16:45.3Z","modified":"2026-10-11T11:01:29.403487856Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:07.324252Z"},{"id":"RHSA-2026:74952","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-10-03T10:17:03Z","modified":"2026-10-03T10:32:34.20901866Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2026-95512","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T00:00:00Z","modified":"2026-10-06T18:12:49.27377836Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:57:44.071534Z"},{"id":"AZL-107396","title":"CVE-2026-95512 affecting package freetype for versions less than 2.13.2-3","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:16:45Z","modified":"2026-11-07T14:17:34.221047974Z","updated_at":"2026-11-07T14:48:11.583685Z"},{"id":"AZL-107859","title":"CVE-2026-95512 affecting package qtbase 6.6.3-6","description":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.","status":"published","published":"2026-10-02T09:16:45Z","modified":"2026-10-15T05:37:09Z","updated_at":"2026-11-02T15:28:01.725816Z"},{"id":"MGASA-2026-0547","title":"Updated freetype2 packages fixes a security vulnerability","description":"Denial of service via repeated subroutine allocations in cid font\nloader. (CVE-2026-95512)\n","status":"published","published":"2026-10-26T15:28:20Z","modified":"2026-10-26T15:30:03.267186145Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"USN-8881-1","title":"freetype vulnerability","description":"It was discovered that FreeType had a flaw in its CID font loader. An\nattacker could possibly use this issue to cause FreeType to consume\nexcessive memory and CPU resources, leading to a denial of service.","status":"published","published":"2026-10-06T12:07:59Z","modified":"2026-10-06T23:42:34.199304224Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}