This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-56001 →

DEBIAN-CVE-2026-56001

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the...

Original description

The description as published by the source.

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-1+deb12u1"}]}]

Debian:13 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-1+deb13u1"}]}]

Debian:14 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-1"}]}]

References

advisory security-tracker.debian.org