Log in Start free

Vulnerability · Published Oct 2, 2026 · Assigned by redhat

CVE-2026-95512Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

Medium 5.5

In plain English

A medium-severity uncontrolled resource consumption in Red Hat build of OpenJDK 11 ELS from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 92.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12freetypeno fix listedDEBIAN-CVE-2026-95512
Debian:13freetypeno fix listedDEBIAN-CVE-2026-95512
Debian:14freetype2.14.3+dfsg-3DEBIAN-CVE-2026-95512
Ubuntu:22.04:LTSfreetype2.11.1+dfsg-1ubuntu0.4UBUNTU-CVE-2026-95512
Ubuntu:22.04:LTSfreetype2.11.1+dfsg-1ubuntu0.4USN-8881-1
Ubuntu:24.04:LTSfreetype2.13.2+dfsg-1ubuntu0.2USN-8881-1
Ubuntu:24.04:LTSfreetype2.13.2+dfsg-1ubuntu0.2UBUNTU-CVE-2026-95512
Ubuntu:26.04:LTSfreetype2.14.2+dfsg-1ubuntu0.2USN-8881-1
Ubuntu:26.04:LTSfreetype2.14.2+dfsg-1ubuntu0.2UBUNTU-CVE-2026-95512

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat build of OpenJDK 11 ELS see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References