The libXfont2 runtime library in X.Org X11 contains two security flaws: an out-of-bounds read/write vulnerability (CVE-2026-59679) and a heap buffer overflow leading to privilege escalation (CVE-2026-44950) in the Font Server Client. These vulnerabilities could allow an attacker to escalate privileges on affected systems. Red Hat has issued security advisories and updates for Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products across multiple CPU architectures. The advisory classifies the impact as Important (high severity) and provides updated packages to fix these issues.

Successful exploitation of these vulnerabilities could lead to privilege escalation on affected systems, allowing an attacker to gain higher-level access than intended. The out-of-bounds read/write and heap buffer overflow flaws in libXfont2 can compromise system security by corrupting memory and executing arbitrary code with elevated privileges.

Red Hat has released official security updates for libXfont2 addressing these vulnerabilities. Users should apply the updates as detailed in the Red Hat advisory RHSA-2026:55448 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are required beyond applying the official patches.