VDB

RHSA-2026:51063

RHSA-2026:51063 PUBLISHED CVSS 7.300000190734863 HIGH

A flaw was found in libXfont2. In the BitmapScaleBitmaps() function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loading a specially crafted PCF font, potentially leading to arbitrary code execution or a denial of service.

Risk Scores

CVSS 3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-devel-0:2.0.3-2.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-devel-0:2.0.3-2.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-devel-0:2.0.3-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-debuginfo-0:2.0.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-0:2.0.3-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)2.0.3-2.el7
Red HatlibXfont2-devel-0:2.0.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)2.0.3-2.el7

…and 9 more

Timeline

  • Aug 6, 2026 CVE Published
  • Aug 6, 2026 CVE Updated
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Security Advisory
  • Aug 6, 2026 Security Advisory
  • Aug 6, 2026 Security Advisory
  • Aug 6, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›