Vulnerability Description
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| X | Libxfont | >= 2.0.0, < 2.0.8 |
Related Weaknesses (CWE)
References
- https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/dff957a5158da038a282a5Patch
- https://www.openwall.com/lists/oss-security/2026/07/08/1Mailing ListPatchThird Party Advisory
FAQ
What is CVE-2026-56003?
CVE-2026-56003 is a vulnerability with a CVSS score of 8.5 (HIGH). A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using ...
How severe is CVE-2026-56003?
CVE-2026-56003 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-56003?
Check the references section above for vendor advisories and patch information. Affected products include: X Libxfont.