CVE record · CVE-2026-59679

fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

CVSS 9.2 CriticalCriticalEPSS 0.0026 · 17th percentile

Critical, because:

CVSS score 9.2: 9.0 or more.

Published by the CVE Program (CNA: suse) at 10 Sept 2026, 08:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
SUSE	Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Container suse/kiosk/xorg:21.1-83.7 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Azure-3P Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-BYOS Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-BYOS-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-BYOS-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-BYOS-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-BYOS Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-BYOS-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-BYOS-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAP-Hardened-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAPCAL Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAPCAL-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAPCAL-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP6-SAPCAL-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Azure-3P Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-BYOS-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-BYOS-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-BYOS-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-GCE-3P Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Hardened-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Hardened-BYOS-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Hardened-BYOS-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAP-Hardened-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAPCAL-Azure Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAPCAL-EC2 Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES15-SP7-SAPCAL-GCE Package name: libXfont2-2	affected ? to before 2.0.3-150000.3.6.1 custom Other versions: unaffected
SUSE	Image SLES-SAP-Azure Package name: libXfont2-2	affected ? to before 2.0.7-160000.5.1 custom Other versions: unaffected

And 66 more products. The full list is on the CVE record.

Identifiers: CVE-2026-59679
CNA: suse
Weakness (CWE): CWE-787
Tags: Container suse/kiosk/tigervnc-x11vnc:1.14-63.8
Container suse/kiosk/xorg:21.1-83.7
SUSE Image SLES15-SP6-SAP
SUSE Image SLES15-SP6-SAP-Azure
SUSE Image SLES15-SP6-SAP-Azure-3P
SUSE Image SLES15-SP6-SAP-BYOS
SUSE Image SLES15-SP6-SAP-BYOS-Azure
SUSE Image SLES15-SP6-SAP-BYOS-EC2
Memory corruption
Published: 10 Sept 2026
Updated: 10 Sept 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
9.0	Critical	3.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	CNA (suse)
9.2	Critical	4.0	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CNA (suse)Used for this record

CISA KEV Not listed.
EPSS 0.0026, the 17th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 10 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

bugzilla.suse.com/show_bug.cgi?id=CVE-2026-59679

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.