This vulnerability is an out-of-bounds read in FreeType library versions 2.14.3 and earlier before commit 5a280ecde6f324de0d226261036e736e0cb49a71, specifically in the src/truetype/ttgxvar.c file within the TT_Get_Var_Design implementation. The affected function is used by FT_Get_Var_Design_Coordinates. The flaw allows reading memory outside intended bounds, which can cause information disclosure (confidentiality impact) and may lead to a partial denial of service (availability impact). No integrity impact is reported. The vulnerability has a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation can lead to limited information disclosure due to out-of-bounds memory reads and may cause partial denial of service conditions. There is no indication of integrity compromise. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official FreeType and Ubuntu security advisories for updates or patches addressing this issue. Until a patch is available, avoid processing untrusted font files with affected FreeType versions.