CVE-2026-23865

Medium · 5.3

CVSS

5.3

EPSS

0.1%

Published

Mar 2, 2026

CISA due date

—

The record

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

Affected packages

Ecosystem	Package	Fixed
openSUSE:Leap 16.0	java-17-openj9	17.0.19.0-bp160.1.1
openSUSE:Leap 16.0	java-21-openj9	21.0.11.0-bp160.1.1
openSUSE:Tumbleweed	freetype2	2.14.2-1.1
openSUSE:Tumbleweed	java-11-openjdk	11.0.31.0-1.1
openSUSE:Tumbleweed	java-17-openjdk	17.0.19.0-1.1
openSUSE:Tumbleweed	java-1_8_0-openjdk	1.8.0.492-1.1
openSUSE:Tumbleweed	java-21-openjdk	21.0.11.0-1.1
openSUSE:Tumbleweed	java-25-openj9	25.0.3.0-1.1
openSUSE:Tumbleweed	java-25-openjdk	25.0.3.0-1.1
openSUSE:Tumbleweed	java-26-openjdk	26.0.1.0-1.1

Related vulnerabilities

CVE-2026-34282 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-34268 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-22021 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-22016 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-22018 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-22013 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-22007 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-17-openj9
CVE-2026-1188 In the Eclipse OMR port library component since release 0.2.0, an API function to return… Also affects java-17-openj9