CVE-2026-50811
Medium
Description
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates
SeverityMedium
CVSS6.5
Exploit probability—
ProductFreeType
PublishedJul 7, 2026
First seenJul 7, 2026
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- FreeType5a280ecde6f324de0d226261036e736e0cb49a71 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| FreeType | 2.14.3 ≤ v | 5a280ecde6f324de0d226261036e736e0cb49a71 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.