CVE-2026-34085 on CTRL-OS 26.05

Aliases: CVE-2026-34085

Packages: fontconfig

Status: Resolved

Advisory Information

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.

Updates

2026-08-01 01:01 CEST

Metadata changes:

• Status for package fontconfig: “Resolved” (027094de97fd6dfe9ba1fa44c57d75701b5f1c35)

2026-07-31 01:10 CEST

Metadata changes:

• Status for package fontconfig: “New”