LI
Product
Libxfont
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Libxfont to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-5199 | 9.8 | Aug 18 | A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact Affected: 1.3.1 |
| CVE-2026-56003 | 8.8 | Jul 8 | libXfont2 computeProps Property Buffer Heap Buffer Overflow Affected: 2.0.0 before 2.0.8 |
| CVE-2026-56002 | 8.8 | Jul 8 | libXfont2 PCF Font Parsing Heap Buffer Overflow Affected: before 2.0.8 |
| CVE-2026-56001 | 8.8 | Jul 8 | libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow Affected: 2.0.0 before 2.0.8 |
| CVE-2017-16611 | 5.5 | Dec 1 | In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar… Affected: 1.0.0 before 1.5.4; 2.0.0 before 2.0.3 |
| CVE-2015-1804 | – | Mar 20 | The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows… Affected: through 1.4.8; 1.5.0 |
| CVE-2015-1803 | – | Mar 20 | The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows… Affected: through 1.4.8; 1.5.0 |
| CVE-2015-1802 | – | Mar 20 | The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service… Affected: through 1.4.8; 1.5.0 |
| CVE-2014-0211 | – | May 15 | Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow… Affected: through 1.4.7; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; +15 more |
| CVE-2014-0210 | – | May 15 | Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the… Affected: through 1.4.7; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; +15 more |
| CVE-2014-0209 | – | May 15 | Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain… Affected: through 1.4.7; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; +15 more |
| CVE-2013-6462 | – | Jan 9 | Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash)… Affected: 1.1.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +17 more |
| CVE-2011-2895 | – | Aug 19 | The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in… Affected: through 1.4.3; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +13 more |
Showing 13