SUSE-SU-2026:2794-1 Security update for libXfont2

This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflow bsc1269018. - CVE-2026-56002: insufficient checks in pcfReadFont can lead to a heap buffer overflow bsc1269019. - CVE-2026-56003: missing bounds check i...

CVE-2026-56001: Heap-based Buffer Overflow

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont...

PT-2026-56383

Name of the Vulnerable Software and Affected Versions libXfont2 versions prior to 2.0.8 Description A heap-based buffer overflow exists in the BitmapScaleBitmaps function. The issue is caused by an integer overflow where a 32-bit size calculation wraps, resulting in an undersized heap allocation...