The X.Org X11 libXfont2 runtime library contains two security flaws: an integer overflow leading to a heap buffer overflow in the BitmapScaleBitmaps function (CVE-2026-56001) and a heap buffer overflow during PCF font parsing (CVE-2026-56002). These vulnerabilities could allow an attacker to cause memory corruption, potentially leading to denial of service or other impacts. Red Hat Product Security has classified these issues as important and released patches for Red Hat Enterprise Linux 9 and associated variants. The advisory references CVE pages for detailed CVSS scoring and impact information.

Exploitation of these heap buffer overflow vulnerabilities could result in memory corruption, which may lead to application crashes or potentially allow execution of arbitrary code depending on the context. The advisory rates the security impact as important (high severity). No known exploits in the wild have been reported at this time.

Red Hat has released security updates for libXfont2 addressing these vulnerabilities. Users should apply the updates provided in Red Hat Enterprise Linux 9 and related distributions as detailed in the Red Hat advisory RHSA-2026:47084. For update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.