CVE-2016-5384

fontconfig contains a vulnerability (CVE-2016-5384) due to unchecked cache offsets, allowing a local attacker to trigger arbitrary free calls and potentially execute code via a crafted cache file. Reports from multiple vendors describe the flaw as a local privilege scenario with possible arbitrar...

CVE-2026-34085

CVE-2026-34085 affects fontconfig before 2.17.1. The vulnerability is an off-by-one error in allocation during sfnt capability handling, causing a one-byte out-of-bounds write in FcFontCapabilities within fcfreetype.c. Consequences include potential crash or code execution. The available connecte...