CVE-2026-50811

Name of the Vulnerable Software and Affected Versions FreeType versions prior to commit 5a280ecde6f324de0d226261036e736e0cb49a71

Description An out-of-bounds read occurs in the TT Get Var Design() implementation, which is utilized by FT Get Var Design Coordinates(). This issue is located within the src/truetype/ttgxvar.c file. An out-of-bounds read is a condition where a program reads data past the end of the intended buffer, potentially leading to information disclosure or system crashes.

Recommendations Update FreeType to the version containing commit 5a280ecde6f324de0d226261036e736e0cb49a71.