CVE-2026-23865

The CVE-2026-23865 entry concerns the FreeType library. Affected component: tt_var_load_item_variation_store in FreeType versions 2.13.2 and 2.13.3. Issue: integer overflow can cause an out-of-bounds read while parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. Impact is described as an ou...