Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-56003 →

DEBIAN-CVE-2026-56003

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfo...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-1+deb12u1"}]}]

Debian:13 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.6-1+deb13u1"}]}]

Debian:14 libxfont

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-1"}]}]

Références

advisory security-tracker.debian.org