CVE-2026-23865 | FreeType up to 2.13.3/2.14.1 HVAR/VVAR/MVAR tt_var_load_item_variation_store out-of-bounds

A vulnerability, which was classified as problematic, has been found in FreeType up to 2.13.3/2.14.1. Impacted is the function tt_var_load_item_variation_store of the component HVAR/VVAR/MVAR. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2026-23865. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.