Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
Graphite Smart Fonts Security Risk: Data Corruption
published 3 months ago
Summary
A security update is available for Graphite, a system that creates special fonts. This update fixes a bug that could allow an attacker to corrupt data, potentially causing problems. To stay secure, update to the latest version of Graphite (1.3.15 or later).
What to do
- Update openeuler graphite2 to version 1.3.14-9.oe2403sp1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openEuler:24.03-LTS-SP1 | openeuler | graphite2 |
< 1.3.14-9.oe2403sp1 Fix: upgrade to 1.3.14-9.oe2403sp1
|
Original advisory text
graphite2 security update
Graphite is a system that can be used to create “smart fonts” capable of displaying writing systems with various complex behaviors. A smart font contains not only letter shapes but also additional instructions indicating how to combine and position the letters in complex ways.
Security Fix(es):
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.(CVE-2026-50593)
Security Fix(es):
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.(CVE-2026-50593)
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-50593 Vendor Advisory
Severity
7.3
High
Timeline
Published9 Jul 2026
Updated18 Aug 2026
First seen9 Jul 2026
Sources
OESA-2026-2897 · OSV
Track software like this
Free during beta