Vulnerability-Lookup

oesa-2026-3055

Vulnerability from osv_openeuler

Published

2026-07-19 11:11

Modified

2026-08-06 11:11

Summary

libXfont2 security update

Details

libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them. contains runtime library.

Security Fix(es):

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server context.(CVE-2026-56001)

A heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.(CVE-2026-56003)

Severity

8.5 (High)


                    
                      CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-56001	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-56002	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-56003	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libXfont2-2.0.5-5.oe2203sp4.aarch64.rpm",
          "libXfont2-debuginfo-2.0.5-5.oe2203sp4.aarch64.rpm",
          "libXfont2-debugsource-2.0.5-5.oe2203sp4.aarch64.rpm",
          "libXfont2-devel-2.0.5-5.oe2203sp4.aarch64.rpm"
        ],
        "noarch": [
          "libXfont2-help-2.0.5-5.oe2203sp4.noarch.rpm"
        ],
        "src": [
          "libXfont2-2.0.5-5.oe2203sp4.src.rpm"
        ],
        "x86_64": [
          "libXfont2-2.0.5-5.oe2203sp4.x86_64.rpm",
          "libXfont2-debuginfo-2.0.5-5.oe2203sp4.x86_64.rpm",
          "libXfont2-debugsource-2.0.5-5.oe2203sp4.x86_64.rpm",
          "libXfont2-devel-2.0.5-5.oe2203sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP4",
        "name": "libXfont2",
        "purl": "pkg:rpm/openEuler/libXfont2\u0026distro=openEuler-22.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.5-5.oe2203sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libXfont2-2.0.6-3.oe2403sp1.aarch64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp1.aarch64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp1.aarch64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "libXfont2-help-2.0.6-3.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "libXfont2-2.0.6-3.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "libXfont2-2.0.6-3.oe2403sp1.x86_64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp1.x86_64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp1.x86_64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "libXfont2",
        "purl": "pkg:rpm/openEuler/libXfont2\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.6-3.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libXfont2-2.0.6-3.oe2403sp3.aarch64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp3.aarch64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp3.aarch64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp3.aarch64.rpm"
        ],
        "noarch": [
          "libXfont2-help-2.0.6-3.oe2403sp3.noarch.rpm"
        ],
        "src": [
          "libXfont2-2.0.6-3.oe2403sp3.src.rpm"
        ],
        "x86_64": [
          "libXfont2-2.0.6-3.oe2403sp3.x86_64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp3.x86_64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp3.x86_64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP3",
        "name": "libXfont2",
        "purl": "pkg:rpm/openEuler/libXfont2\u0026distro=openEuler-24.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.6-3.oe2403sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libXfont2-2.0.6-3.oe2403sp4.aarch64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp4.aarch64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp4.aarch64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp4.aarch64.rpm"
        ],
        "noarch": [
          "libXfont2-help-2.0.6-3.oe2403sp4.noarch.rpm"
        ],
        "src": [
          "libXfont2-2.0.6-3.oe2403sp4.src.rpm"
        ],
        "x86_64": [
          "libXfont2-2.0.6-3.oe2403sp4.x86_64.rpm",
          "libXfont2-debuginfo-2.0.6-3.oe2403sp4.x86_64.rpm",
          "libXfont2-debugsource-2.0.6-3.oe2403sp4.x86_64.rpm",
          "libXfont2-devel-2.0.6-3.oe2403sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP4",
        "name": "libXfont2",
        "purl": "pkg:rpm/openEuler/libXfont2\u0026distro=openEuler-24.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.6-3.oe2403sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libXfont2-2.0.4-2.oe2003sp4.aarch64.rpm",
          "libXfont2-debuginfo-2.0.4-2.oe2003sp4.aarch64.rpm",
          "libXfont2-debugsource-2.0.4-2.oe2003sp4.aarch64.rpm",
          "libXfont2-devel-2.0.4-2.oe2003sp4.aarch64.rpm"
        ],
        "noarch": [
          "libXfont2-help-2.0.4-2.oe2003sp4.noarch.rpm"
        ],
        "src": [
          "libXfont2-2.0.4-2.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "libXfont2-2.0.4-2.oe2003sp4.x86_64.rpm",
          "libXfont2-debuginfo-2.0.4-2.oe2003sp4.x86_64.rpm",
          "libXfont2-debugsource-2.0.4-2.oe2003sp4.x86_64.rpm",
          "libXfont2-devel-2.0.4-2.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "libXfont2",
        "purl": "pkg:rpm/openEuler/libXfont2\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.4-2.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them.  contains runtime  library.\r\n\r\nSecurity Fix(es):\n\nA heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server context.(CVE-2026-56001)\n\nA heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)\n\nA heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.(CVE-2026-56003)",
  "id": "OESA-2026-3055",
  "modified": "2026-08-06T11:11:56Z",
  "published": "2026-07-19T11:11:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3055"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56001"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56002"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56003"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "libXfont2 security update",
  "upstream": [
    "CVE-2026-56001",
    "CVE-2026-56002",
    "CVE-2026-56003"
  ]
}

CVE-2026-56001 (GCVE-0-2026-56001)

Vulnerability from cvelistv5 – Published: 2026-07-08 08:49 – Updated: 2026-07-09 03:55

Title

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

Summary

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

Severity

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 00:00 UTC

CWE

CWE-122 - Heap-based buffer overflow

Assigner

suse mitre root

References

2 references

URL	Tags
https://www.openwall.com/lists/oss-security/2026/…	vendor-advisory
https://gitlab.freedesktop.org/xorg/lib/libxfont/…	patch

Impacted products

1 product

Vendor	Product	Version
X.Org	libXfont2	Affected: 0 , < 2.0.8 (rpm)

Date Public

2026-07-08 08:15

Credits

Anonymous working with Trend Micro Zero Day Initiative.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56001",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T03:55:45.984Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "libXfont2",
          "product": "libXfont2",
          "repo": "https://gitlab.freedesktop.org/xorg/lib/libxfont",
          "vendor": "X.Org",
          "versions": [
            {
              "lessThan": "2.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anonymous working with Trend Micro Zero Day Initiative."
        }
      ],
      "datePublic": "2026-07-08T08:15:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont"
            }
          ],
          "value": "A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-234",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-234 Hijacking a privileged process"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based buffer overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T08:49:24.706Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2026/07/08/1"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/be0b08e2d354138d3222b4490e2a77c6ee42f778"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2026-56001",
    "datePublished": "2026-07-08T08:49:24.706Z",
    "dateReserved": "2026-06-18T09:26:55.988Z",
    "dateUpdated": "2026-07-09T03:55:45.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56002 (GCVE-0-2026-56002)

Vulnerability from cvelistv5 – Published: 2026-07-08 09:12 – Updated: 2026-07-09 03:55

Title

libXfont2 PCF Font Parsing Heap Buffer Overflow

Summary

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

Severity

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 00:00 UTC

CWE

CWE-122 - Heap-based buffer overflow

Assigner

suse mitre root

References

2 references

URL	Tags
https://gitlab.freedesktop.org/xorg/lib/libxfont/…	patch
https://www.openwall.com/lists/oss-security/2026/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
X.Org	libXfont2	Affected: 0 , < 2.0.8 (rpm) cpe:2.3:a:x.org:libxfont2::::::::

Date Public

2026-07-08 09:08

Credits

Anonymous working with Trend Micro Zero Day Initiative.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56002",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T03:55:46.745Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "libXfont2",
          "product": "libXfont2",
          "repo": "https://gitlab.freedesktop.org/xorg/lib/libxfont",
          "vendor": "X.Org",
          "versions": [
            {
              "lessThan": "2.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:x.org:libxfont2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.8",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anonymous working with Trend Micro Zero Day Initiative."
        }
      ],
      "datePublic": "2026-07-08T09:08:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A heap bufferflow in pcfReadFont() due to missing glyph bounds checking\u0026nbsp;in libXfont2 before 2.0.8\u0026nbsp; allows attackers authenticated as X client to execute code within the X server."
            }
          ],
          "value": "A heap bufferflow in pcfReadFont() due to missing glyph bounds checking\u00a0in libXfont2 before 2.0.8\u00a0 allows attackers authenticated as X client to execute code within the X server."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-234",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-234 Hijacking a privileged process"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based buffer overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T09:12:51.480Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/b4389e0b1d84a690b819bb27b1439968811a3674"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2026/07/08/1"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "libXfont2 PCF Font Parsing Heap Buffer Overflow",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2026-56002",
    "datePublished": "2026-07-08T09:12:51.480Z",
    "dateReserved": "2026-06-18T09:26:55.988Z",
    "dateUpdated": "2026-07-09T03:55:46.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56003 (GCVE-0-2026-56003)

Vulnerability from cvelistv5 – Published: 2026-07-08 09:25 – Updated: 2026-07-09 03:55

Title

libXfont2 computeProps Property Buffer Heap Buffer Overflow

Summary

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

Severity

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 00:00 UTC

CWE

CWE-122 - Heap-based buffer overflow

Assigner

suse mitre root

References

2 references

URL	Tags
https://www.openwall.com/lists/oss-security/2026/…	vendor-advisory
https://gitlab.freedesktop.org/xorg/lib/libxfont/…	patch

Impacted products

1 product

Vendor	Product	Version
X.Org	libXfont2	Affected: 0 , < 2.0.8 (rpm) cpe:2.3:a:x.org:libxfont2::::::::

Date Public

2026-07-08 09:22

Credits

Anonymous working with Trend Micro Zero Day Initiative

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56003",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T03:55:47.539Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "libXfont2",
          "product": "libXfont2",
          "repo": "https://gitlab.freedesktop.org/xorg/lib/libxfont/",
          "vendor": "X.Org",
          "versions": [
            {
              "lessThan": "2.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:x.org:libxfont2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.8",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anonymous working with Trend Micro Zero Day Initiative"
        }
      ],
      "datePublic": "2026-07-08T09:22:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cpre\u003eA heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.\u003c/pre\u003e"
            }
          ],
          "value": "A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-234",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-234 Hijacking a privileged process"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based buffer overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T09:25:41.723Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2026/07/08/1"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/dff957a5158da038a282a59a31fe736702732939"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "libXfont2 computeProps Property Buffer Heap Buffer Overflow",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2026-56003",
    "datePublished": "2026-07-08T09:25:41.723Z",
    "dateReserved": "2026-06-18T09:26:55.988Z",
    "dateUpdated": "2026-07-09T03:55:47.539Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

oesa-2026-3055

Vulnerability from osv_openeuler

CVE-2026-56001 (GCVE-0-2026-56001)

CVE-2026-56002 (GCVE-0-2026-56002)

CVE-2026-56003 (GCVE-0-2026-56003)

Tags

Sightings

Nomenclature

Related by attack behaviour