Fwd: Announcing FreeType version 2.15.0
FreeType 2.15.0 fixes CVE-2026-95512, CVE-2026-50811, and vendored zlib flaw CVE-2026-27171.
Werner Lemberg announced FreeType 2.15.0, forwarded to oss-security by Alan Coopersmith. The notes mention a fix for CVE-2026-95512, and the CVE record for CVE-2026-50811 also lists a commit in this release. The git log pulls the fix for CVE-2026-27171 into FreeType's vendored copy of zlib 1.3.1. The post does not report active exploitation.
- FreeType 2.15.0 was announced on 12 October 2026.
- Release notes cite a fix for CVE-2026-95512.
- CVE-2026-50811 also lists a commit included in this release.
- The vendored zlib 1.3.1 copy pulls in the CVE-2026-27171 fix.
- No exploitation is reported in the announcement.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-27171 | zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination… | 5.5 | <1% | PoC | |
| CVE-2026-50811 | An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in… | 6.5 | <1% | ||
| CVE-2026-95512 | Denial of service in FreeType CID font loader | 5.5 | — |
From the original article
Posted by Alan Coopersmith on Oct 12 While the notes below only mention the fix for CVE-2026-95512, the CVE record for CVE-2026-50811 also lists a commit included in this release. The git log also mentions pulling in the fix for CVE-2026-27171 to the vendored copy of zlib 1. 3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.