CVE-2026-23865
Unknown
CVE-2026-23865
SUSE
Released: March 05, 2026
Updated: April 16, 2026
Restart Required
Description
CVE-2026-23865
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Fixed Vulnerabilities 1
Mar 02, 2026
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation…
Quick Info
Patch ID:
CVE-2026-23865
Vendor:
SUSE
Severity:
Unknown
CVEs Fixed:
1
Restart:
Required
Vendor
SUSEAdditional Info
advisory id:
CVE-2026-23865
advisory type:
Security Update
cvrf filename:
cvrf-CVE-2026-23865.xml
