A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

A flaw was found in libXfont2. In the BitmapScaleBitmaps() function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loading a specially crafted PCF font, potentially leading to arbitrary code execution or a denial of service.

This flaw in libXfont2 is rated as Important. A local attacker could exploit an integer overflow in the `BitmapScaleBitmaps()` function, leading to a heap buffer overflow and potential arbitrary code execution or denial of service. This vulnerability requires the processing of a specially crafted PCF font, typically through an X server or an application configured to load untrusted font files. Red Hat Enterprise Linux 10 2026-07-28T00:00:00Z RHSA-2026:47079 libXfont2-0:2.0.6-5.el10_2.1 Red Hat Enterprise Linux 8 2026-07-28T00:00:00Z RHSA-2026:47103 libXfont2-0:2.0.3-2.el8_10.1 Red Hat Enterprise Linux 9 2026-08-03T00:00:00Z RHSA-2026:47084 libXfont2-0:2.0.3-12.el9_8.1 Red Hat Enterprise Linux 7 Affected libXfont2 https://www.cve.org/CVERecord?id=CVE-2026-56001 https://nvd.nist.gov/vuln/detail/CVE-2026-56001