MGASA-2026-0472

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2026-0472.html

Import Source

https://advisories.mageia.org/MGASA-2026-0472.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2026-0472

Upstream

CVE-2026-50811

Published

2026-10-09T17:00:24Z

Modified

2026-10-09T17:15:03Z

Summary

Updated freetype2 package fixes a security vulnerability

Details

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates. (CVE-2026-50811)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:10 / freetype2

Package

Name: freetype2
Purl: pkg:rpm/mageia/freetype2?arch=source&distro=mageia-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.14.2-1.1.mga10.tainted

Ecosystem specific

{
    "section":  "tainted"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2026-0472.json"