FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libXfont2 -- multiple vulnerabilities

Affected packages
		libXfont2	<	2.0.9

Details

VuXML ID	1fae5869-9275-11f1-83e9-901b0e13f1a0
Discovery	2026-08-05
Entry	2026-08-07

Zhixi "Jace" Sun, independent security researcher reports:

CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow

CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write

[source]

References

CVE Name	CVE-2026-44950
CVE Name	CVE-2026-59679
URL	https://lists.x.org/archives/xorg-announce/2026-August/003734.html