Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-55999

xorg-server / xwayland glamor font atlas Heap Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

X.Org xorg-server

Default version status: unaffected

  • 0 to < 21.1.24affected

X.Org xwayland

Default version status: unaffected

  • 0 to < 24.1.13affected

References