CVE-2026-56001
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32-bit size could be used by attackers able to access the X Server to execute code within the X server context.
Risk Assessment
The risk involves potential remote code execution in the X server by an attacker with access to it, which could lead to control over the graphical system and privilege escalation.
Recommendation
It is recommended to immediately upgrade libXfont2 to version 2.0.8 or later, which includes a fix for the vulnerability.
Original NVD description (English source)
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont