A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Freetype
  • Freetype
Redhat
  • Build Of Openjdk 11 Els
  • Enterprise Linux
  • Hardened Images
  • Hummingbird
  • Openjdk Els

No data.

No data.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:74952 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-95512 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2462295 cve-icon cve-icon
https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-95512 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-95512 cve-icon
History

Tue, 06 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 04 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Freetype
Freetype freetype
Redhat build Of Openjdk 11 Els
Redhat hardened Images
Vendors & Products Freetype
Freetype freetype
Redhat build Of Openjdk 11 Els
Redhat hardened Images

Fri, 02 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
References

Fri, 02 Oct 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 02 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.
Title Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openjdk Els
Weaknesses CWE-400
CPEs cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:openjdk_els:11
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openjdk Els
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2026-10-02T09:05:11.245Z

Updated: 2026-10-06T02:29:12.706Z

Reserved: 2026-09-22T08:21:58.125Z

Link: CVE-2026-95512

cve-icon Vulnrichment

Updated: 2026-10-06T02:29:08.468Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-02T09:16:45.300

Modified: 2026-10-06T03:17:09.750

Link: CVE-2026-95512

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-02T08:07:01Z

Links: CVE-2026-95512 - Bugzilla