A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat Subscribe
Enterprise Linux Subscribe
Hummingbird Subscribe
Openjdk Els Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

References
Link Providers
https://access.redhat.com/security/cve/CVE-2026-95512 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2462295 cve-icon cve-icon
https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9 cve-icon cve-icon
History

Fri, 02 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.
Title Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openjdk Els
Weaknesses CWE-400
CPEs cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:openjdk_els:11
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openjdk Els
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-02T10:17:33.209Z

Reserved: 2026-09-22T08:21:58.125Z

Link: CVE-2026-95512

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-02T09:16:45.300

Modified: 2026-10-02T11:17:39.017

Link: CVE-2026-95512

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-02T10:30:07Z

Weaknesses