Threat Intel

v0.1

← CVEs

CVE-2026-34085

MED 5.9
Published
2026-03-25
Last Modified
2026-03-27
Affected Apps
17
Affected Devices
142
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.
Affected Applications in Environment 17
fontconfig v2.15.0-1.1ubuntu2
46 devices
fontconfig v2.14.1-4
9 devices
fontconfig v2.14.0-2.el9_1
27 devices
fontconfig v2.11.94-0ubuntu1.1
2 devices
fontconfig v2.13.1-4.2ubuntu5
20 devices
fontconfig v2.13.0-4.3.el7
1 device
fontconfig v2.13.1-4.2
8 devices
fontconfig v2.13.1-2ubuntu3
7 devices
fontconfig v2.14.0-2.el9_1
1 device
fontconfig v2.13.1-4.el8
5 devices
fontconfig v2.13.1-4.el8
6 devices
fontconfig v2.15.0-2.3
4 devices
fontconfig v2.12.6-0ubuntu2
1 device
fontconfig v2.14.0-2.el9_1
1 device
fontconfig v2.15.0-7.el10
1 device
fontconfig v2.14.0-2.el9_1
2 devices
fontconfig v2.11.0-0ubuntu4.2
1 device
Affected Devices 142
2ua5171h8k Linux DPCOMPdemoserver Linux DPNCHA-194733 Linux administrator-SYS-4029GP-TRT2 Linux atc.db.usu.edu Linux auto-score Linux awep1 Linux bacha25 Linux bennett-HP-Z2-SFF-G4-Workstation Linux blakeutil Linux cceredcapweb Linux chela03 Linux chela04 Linux chela05 Linux cleanaddressdev.banner.usu.edu Linux devjobsub.banner.usu.edu Linux dispatch Linux dpapsb-161390.aggies.usu.edu Linux dpapsb-191594.mypc.usu.edu Linux el103-02.ece.usu.edu Linux el103-03.ece.usu.edu Linux el103-04.ece.usu.edu Linux el103-05.ece.usu.edu Linux el103-07.ece.usu.edu Linux el103-08.ece.usu.edu Linux el103-09.ece.usu.edu Linux el103-10.ece.usu.edu Linux el103-14.ece.usu.edu Linux el103-15.ece.usu.edu Linux el103-16.ece.usu.edu Linux el103-17.ece.usu.edu Linux el103-18.ece.usu.edu Linux el103-19.ece.usu.edu Linux el103-20.ece.usu.edu Linux el120-01.ece.usu.edu Linux el120-02.ece.usu.edu Linux el120-03.ece.usu.edu Linux el120-04.ece.usu.edu Linux el120-05.ece.usu.edu Linux el120-06.ece.usu.edu Linux el120-08.ece.usu.edu Linux el120-09.ece.usu.edu Linux el120-10.ece.usu.edu Linux el120-11.ece.usu.edu Linux el120-12.ece.usu.edu Linux el120-14.ece.usu.edu Linux elend Linux eprocdev.banner.usu.edu Linux ezri-utility-01 Linux facreadyprod.pplant.usu.edu Linux facreadytestrhel.pplant.usu.edu Linux facshibsp2.pplant.usu.edu Linux flexnet Linux flo-rida Linux fw Linux gravekeeper Linux guru.cluster Linux hotcheeto Linux itfinance Linux jed Linux joek-HP-Z2-SFF-G9-Workstation-Desktop-PC Linux kcm.usu.edu Linux kena-utility Linux kmlab Linux ldap-lb01 Linux ldap-lb02 Linux libki-server Linux librenms Linux librenmsdb Linux log Linux minemeld Linux mirror3 Linux miscnet Linux monitor01 Linux monitor02 Linux netbox Linux nt Linux omekanew Linux oms.db.usu.edu Linux owenclarke-OptiPlex-7090 Linux paymentworksdev.banner.usu.edu Linux portscan01 Linux portscan02 Linux redcapweb Linux second-thrifted-tractor Linux sentry Linux server1mathusuedu Linux server2math Linux spencer-funk-HP-Z2-SFF-G5-Workstation Linux starfleetpad Linux storm Linux strat Linux svn.usu.edu Linux sympa.ser321.usu.edu Linux thinkstation Linux tsutil.it.usu.edu Linux vinmathusuedu Linux web-lb-stage.usu.edu Linux web-lb01-redirect.usu.edu Linux web-lb01.usu.edu Linux web-lb02-redirect.usu.edu Linux web-lb02.usu.edu Linux web-lb03-redirect.usu.edu Linux web-lb03.usu.edu Linux web-lb04.usu.edu Linux web02.usu.edu Linux web03.usu.edu Linux web04a Linux web05 Linux web06 Linux web08.usu.edu Linux web09.usu.edu Linux web10 Linux web10-awhc Linux web10-awhc Linux web11.usu.edu Linux web12.usu.edu Linux web13.usu.edu Linux web14.usu.edu Linux web15.usu.edu Linux web16.usu.edu Linux web17 Linux web18 Linux web19.usu.edu Linux web20 Linux web21 Linux web23 Linux web24 Linux web25 Linux web27.usu.edu Linux web29.usu.edu Linux web30.usu.edu Linux web31.usu.edu Linux web32.usu.edu Linux web33.usu.edu Linux web34.usu.edu Linux web35.usu.edu Linux web36.usu.edu Linux web37.usu.edu Linux webs.usu.edu Linux webtools Linux zldtst.db.usu.edu Linux
References 3