PT-2026-38075 · Bitnami · Java-Min

Publicado 2026-05-06 · Atualizado 2026-05-06

OSV

An integer overflow in the tt var load item variation store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

Identificadores relacionados

BIT-JAVA-MIN-2026-23865

Produtos afetados

Java-Min

Referências · 6

• https://sourceforge.net/projects/freetype/files/freetype2/2.14.2 · Nota
• https://osv.dev/vulnerability/BIT-java-min-2026-23865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-23865 · Nota de Segurança
• http://openwall.com/lists/oss-security/2026/03/03/8 · Nota
• https://gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841c · Nota
• https://facebook.com/security/advisories/cve-2026-23865 · Nota