AZL-92087

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92087.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-92087

Upstream

CVE-2026-56002

Published

2026-07-08T10:16:23Z

Modified

2026-08-28T17:48:12.347161459Z

Summary

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1

Details

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-56002

Affected packages

Azure Linux:3 / libXfont2

Package

Name: libXfont2
Purl: pkg:rpm/azure-linux/libXfont2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.8-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92087.json"