{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3agraphic_fonts/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:*:graphic_fonts:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-119969"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Graphic Fonts"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2026-119969 is a heap-based buffer overflow vulnerability residing in the Graphic Fonts component. The vulnerability permits an unauthenticated, remote attacker to execute arbitrary code over the network. Technical details regarding the specific network protocols or input vectors utilized for exploitation remain undisclosed in the current advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution, granting the attacker the privileges of the underlying service or application processing the malicious font data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify systems utilizing the Graphic Fonts component within your environment.\u003c/li\u003e\n\u003cli\u003eMonitor network traffic for anomalous inbound connections or malformed protocol traffic directed toward services that handle font rendering or graphical processing.\u003c/li\u003e\n\u003cli\u003eReview vendor release notes for patches addressing CVE-2026-119969 and apply updates on a priority basis once available.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T02:15:59Z","date_published":"2026-11-11T02:15:59Z","id":"https://feed.craftedsignal.io/briefs/2026-11-graphic-fonts-overflow/","summary":"A heap-based buffer overflow in Graphic Fonts allows a remote, unauthorized attacker to achieve remote code execution via network-based exploitation.","title":"Graphic Fonts: Heap-based buffer overflow (CVE-2026-119969)","url":"https://feed.craftedsignal.io/briefs/2026-11-graphic-fonts-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:*:graphic_fonts:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}