PT-2026-41574 · Julia · Freetype2 Jll

Published 2026-05-07 · Updated 2026-05-07

OSV

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt init face.

Related Identifiers

JLSEC-2026-457

Affected Products

Freetype2 Jll

References · 8

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-457 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU · Vendor Advisory
• https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138 · Note
• https://security.gentoo.org/glsa/202402-06 · Note