CyberSec.Space Logo
Back to CVE Browser

CVE-2026-50811

MEDIUM
6.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-07-07
Last Modified2026-07-09
Data SourcesNVD

Vulnerability Description

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://gist.github.com/junius-sec/6dd0fb25b643f89914083a38e5e57ace
🔗 https://github.com/freetype/freetype/commit/5a280ecde6f324de0d226261036e736e0cb49a71
🔗 https://gitlab.freedesktop.org/freetype/freetype/-/commit/5a280ecde6f324de0d226261036e736e0cb49a71
🔗 https://gitlab.freedesktop.org/freetype/freetype/-/issues/1436
🔗 https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1436

Related Vulnerabilities

CVE-2026-660535.9

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache T...

CVE-2026-586628.7

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue af...

CVE-2026-583898.7

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thri...

CVE-2026-580236.9

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are re...