CVE-2026-23865 Unknown

CVE-2026-23865

SUSE Released: March 05, 2026 Updated: April 16, 2026 Restart Required

Description

CVE-2026-23865 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

Fixed Vulnerabilities 1

CVE-2026-23865 N/A 0.0 ⚠️ KEV fixed
Mar 02, 2026

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation…

Quick Info

Patch ID: CVE-2026-23865
Vendor: SUSE
Severity: Unknown
CVEs Fixed: 1
Restart: Required

Vendor

SUSE

Additional Info

advisory id: CVE-2026-23865
advisory type: Security Update
cvrf filename: cvrf-CVE-2026-23865.xml

Share