fontconfig project
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| fontconfig | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-34085 fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontC 0.1%