AZL-107396
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107396.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-107396
- Upstream
- Published
- 2026-10-02T09:16:45Z
- Modified
- 2026-10-11T14:17:50Z
- Summary
- CVE-2026-95512 affecting package freetype 2.13.2-2
- Details
-
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.
- References