Out-of-Bounds Read Vulnerability in FreeType Library

CVE-2026-50811

What is CVE-2026-50811?

An out-of-bounds read vulnerability has been identified in the FreeType library, specifically affecting the functionality related to TrueType font processing. This issue arises in the TT_Get_Var_Design implementation utilized by FT_Get_Var_Design_Coordinates. Attackers exploiting this vulnerability may be able to read sensitive data from memory, potentially leading to unauthorized access to information. It is crucial for users to update to FreeType version 2.14.3 or later, where this vulnerability has been addressed, to mitigate the risks associated with this security flaw.

References