CVE-2022-26927

CVE-2022-26927 Una fuente de prueba de concepto con un informe adjunto. Empezaré a trabajar en esto mañana. Disculpas por no haber investigado mucho sobre ExFreePoolWithTag. ¡Me aseguraré de ocuparme de eso en breve!...

CVE-2025-27363-proof-of-concept

Proof-of-concept for CVE-2025-27363 that crashes FreeType 2.13.0. This modifies Roboto Flex, a variable font, so that the "%" character glyph 8 is now a composite glyph with 0xfffd subglyphs. Rendering the edited font with FreeType 2.13.0 the last version before the fix crashes, with ASAN detecti...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

Palimpsest

CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...

CVE-2023-21716

CVE-2023-21716 Corrupción del montón en la tabla de fuentes RTF de Microsoft Word https://twitter.com/jduck Una vulnerabilidad en wwlib de Microsoft Office permite a los atacantes lograr la ejecución remota de código con los privilegios de la víctima que abre un documento RTF malicioso. El atacan...

CVE-2020-1020-Exploit

CVE-2020-1020 Exploit de desbordamiento del grupo de fuentes Type1 para LPE SO compatible: Windows 7,8,8.1 x64...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. CVE-2026-70907: OpenJDK: Enhance TLS server bsc127576...

Linux Distros Unpatched Vulnerability : CVE-2026-80740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

UBUNTU-CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458 Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

CVE-2026-85458 is a divide-by-zero vulnerability in Xpdf 4.06 (and earlier) triggered when a Type 3 font contains a glyph with a zero height . The bug causes a low-availability impact, rated CVSS 4.0 base score 2.1 (LOW) with a local attack vector and high complexity. No exploitation or in-the-wi...

EUVD-2026-70735

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...