https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T17:08:49.643050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-95512 UBUNTU-CVE-2026-95512 2026-10-22T17:08:49.644252+00:00

Affected: Ubuntu:Pro:14.04:LTS: freetype, Ubuntu:Pro:16.04:LTS: freetype, Ubuntu:Pro:18.04:LTS: freetype, Ubuntu:20.04:LTS: freetype, Ubuntu:22.04:LTS: freetype, Ubuntu:24.04:LTS: freetype, Ubuntu:26.04:LTS: freetype

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.