Ubuntu 26.04 Graphite2 Critical DoS Vulnerability USN-8444-1 CVE-2026-50593

ubuntu

June 17, 2026

graphite2 could be made to crash or run programs if it opened a specially crafted file.

Summary

graphite2 could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- graphite2: Font rendering engine for Complex Scripts

Details:

It was discovered that Graphite incorrectly handled memory when running

certain actions. An attacker could use this issue to cause Graphite to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service critical Ubuntu graphite2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libgraphite2-3                  1.3.14-11ubuntu1.1

Ubuntu 25.10
  libgraphite2-3                  1.3.14-2ubuntu1.3

Ubuntu 24.04 LTS
  libgraphite2-3                  1.3.14-2ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libgraphite2-3                  1.3.14-1ubuntu0.1

In general, a standard system update will make all the necessary changes.