CLSA-2026-1787310855
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787310855.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787310855
- Upstream
- Published
- 2026-08-21T11:14:26Z
- Modified
- 2026-10-26T09:31:34Z
- Summary
- Fix CVE(s): CVE-2025-27363
- Details
-
- SECURITY UPDATE: out-of-bounds write when parsing composite subglyphs
of TrueType GX / variable fonts (ELSCVE-171535)
- debian/patches-freetype/CVE-2025-27363.patch: reject a subglyph count that truncates to a negative short in load_truetype_glyph before it is used to size the outline arrays in src/truetype/ttgload.c.
- CVE-2025-27363
- SECURITY UPDATE: out-of-bounds write when parsing composite subglyphs
of TrueType GX / variable fonts (ELSCVE-171535)
- References
Affected packages
TuxCare:Ubuntu:18.04 / freetype2-demos
Package
- Name
- freetype2-demos
- Purl
- pkg:deb/tuxcare/freetype2-demos?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libfreetype6
Package
- Name
- libfreetype6
- Purl
- pkg:deb/tuxcare/libfreetype6?distro=ubuntu-18.04