Is CVE-2026-56003 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56003?

CVE-2026-56003 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-56003

Description

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.