21 matches found
EUVD-2026-41899
Pillow PcfFontFile.loadbitmaps: Image.frombytes called without decompressionbombcheck — bomb protection bypass via PCF font loading...
USN-8560-1 libxfont vulnerabilities
It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-56001 It was...
xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow
A flaw was found in the glamorfontget function of the xorg-x11-server. This vulnerability, a heap buffer overflow, occurs when the server processes a specially crafted PCF font file where individual glyph metrics exceed the declared maximum bounds. An authenticated X client can exploit this by...
SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2026:2792-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2792-1 advisory. This update for xorg-x11-server fixes the following issue - CVE-2026-55999: missing bounds check in glamorfontget can lead to a heap buffer overflow wh...
CVE-2026-56001
A flaw was found in libXfont2. In the BitmapScaleBitmaps function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loadin...
CVE-2026-54059
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...
PYSEC-2026-2253
Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py loadbitmaps read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes without calling Image.decompressionbombcheck, allowing crafted PCF font data to cause excessive memory allocation. Thi...
openSUSE Security Update : freetype2 (openSUSE-2020-704)
This update for freetype2 to version 2.10.1 fixes the following issues : Security issue fixed : - CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c bsc1079603. Non-security issues fixed : - Update to version 2.10.1 - The bytecode hinting of OpenType variation fonts was flawed, sinc...
openSUSE: Security Advisory for freetype2 (openSUSE-SU-2020:0704-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for freetype2 (moderate)
openSUSE Security Update: Security update for freetype2 Announcement ID: openSUSE-SU-2020:0704-1 Rating: moderate References: 1079603 1091109 Cross-References: CVE-2018-6942 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...
SUSE SLED15 / SLES15 Security Update : freetype2 (SUSE-SU-2020:1353-1)
This update for freetype2 to version 2.10.1 fixes the following issues : Security issue fixed : CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c bsc1079603. Non-security issues fixed : Update to version 2.10.1 - The bytecode hinting of OpenType variation fonts was flawed, since th...
X.Org X Server PCF Font Parser Buffer Overflow (CVE-2008-0006)
X.Org foundation's X Window System commonly X11 or X Window is a networking and display protocol which provides windowing on bitmap displays. It provides the standard toolkit and protocol to build graphical user interfaces GUIs on Unix-like operating systems and OpenVMS, and is supported by almos...
XFree86 / X.Org / NX multiple security vulnerabilities
XInput and TOG-CUP extensions memory corruption, EVI and MIT-SHM extensions integer overflows, multiple extensions array index overflows. libxfont PCF fonts parsing buffer overflow...
Debian Security Advisory DSA 1466-2 (xorg-server, libxfont, xfree86)
The remote host is missing an update to xorg-server, libxfont, xfree86 announced via advisory DSA 1466-2. OpenVAS Vulnerability Test $Id: deb14662.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1466-2 xorg-server, libxfont, xfree86 Authors: Thomas Reinke...
DSA-1466-2 libxfont xfree86 xorg-server - several vulnerabilities
Bulletin has no description...
Xorg / XFree86 PCF font parser buffer overflow
Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...
Xorg / XFree86 PCF font parser buffer overflow
Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...
Debian Security Advisory DSA 1193-1 (xfree86)
The remote host is missing an update to xfree86 announced via advisory DSA 1193-1. Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following...
Debian DSA-1193-1 : xfree86 - several vulnerabilities
Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3467 Chris Evan discovered an integer overflow in the code t...