Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-02 | 2 | Disclosure2 |
| 2026-03-03 | 1 | Disclosure1 |
| 2026-03-06 | 1 | Disclosure1 |
| 2026-03-08 | 1 | Disclosure1 |
| 2026-03-13 | 1 | Disclosure1 |
CVE-2026-23865: FreeType: Out of bounds read when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts https://www.openwall.com/lists/oss-security/2026/03/03/8 Fixed in 2.14.2
Post summary
The text reports CVE‑2026‑23865, an out‑of‑bounds read flaw in FreeType’s variable‑font table parsing, and notes the vulnerability is fixed in version 2.14.2.
csirt_it: Rilevata una nuova vulnerabilità, tracciata tramite la CVE-2026-23865, che interessa la libreria di rendering dei font #FreeType Rischio: 🟡 Tipologia: 🔸 Information Disclosure 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/rilevata-nuova-vulnerabilita-in-freetype ⚠ Importante … https://t.co/wHZDVyhGpa
Post summary
The post announces a newly discovered vulnerability (CVE-2026-23865) affecting the FreeType rendering library, noting information disclosure and denial‑of‑service risks without providing exploit details or mitigation.
Critical FreeType flaw in #Ubuntu (USN-8086-1). CVE-2026-23865 is an integer arithmetic issue that can leak sensitive memory. Read more: 👉 https://tinyurl.com/583apfjp #Security https://t.co/dxRTO8usJ9
Post summary
The tweet announces that CVE‑2026‑23865 is a critical integer arithmetic flaw in FreeType that can leak memory, and refers to Ubuntu USN‑8086‑1 for a fix.
CVE-2026-23865 Integer Overflow in Freetype Library 2.13.2 and 2.13.3 Enables Bounds Read Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23865
Post summary
A new integer overflow vulnerability in Freetype Library 2.13.2 and 2.13.3 has been disclosed, allowing a bounds read exploit.
🚨*CVE* CVE-2026-23865 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operati… https://www.cve.org/CVERecord?id=CVE-2026-23865 ----- Traducción: CVE-2026-23865 Un … http://infoflow.cloud`
Post summary
The post announces CVE-2026-23865, detailing an integer overflow in Freetype that could lead to an out‑of‑bounds read, but offers no PoC, exploit, or patch information.
CVE-2026-23865 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operati… https://www.cve.org/CVERecord?id=CVE-2026-23865
Post summary
The text announces CVE-2026-23865, an integer overflow in Freetype's tt_var_load_item_variation_store that could lead to out‑of‑bounds reads in versions 2.13.2 and 2.13.3.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freetype | freetype | - | - | - |