CVE-2026-50811 Memory corruption in n/a
An out-of-bounds read in FreeType allows attackers to cause denial of service or disclose sensitive memory contents via crafted fonts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-50811?
CVE-2026-50811 is a medium-severity memory corruption vulnerability in n/a, published on 7 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates
Weakness: CWE-125
Which versions are affected by CVE-2026-50811?
Linux distribution packages (6)
freetype Red Hat:hummingbird:1 | All versions | 0:2.14.3-1.2.hum1 |
freetype-demos Red Hat:hummingbird:1 | All versions | 0:2.14.3-1.2.hum1 |
freetype-devel Red Hat:hummingbird:1 | All versions | 0:2.14.3-1.2.hum1 |
freetype2 SUSE:Linux Micro 6.0 | All versions | 2.14.3-1.1 |
freetype2 SUSE:Linux Micro 6.1 | All versions | 2.14.3-slfo.1.1_1.1 |
freetype2 openSUSE:Tumbleweed | All versions | 2.14.3-1.1 |
How do I fix CVE-2026-50811?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-50811 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-50811 exists.
Sources
Also known as DEBIAN-CVE-2026-50811, ECHO-7aad-5728-3a60, GHSA-v5fr-wv7c-jq2m, MGASA-2026-0472, RHSA-2026:36841, SUSE-SU-2026:22922-1 and 4 more.