Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-2895

33
FAUCET Score

CVE-2011-2895 describes a critical vulnerability in the LZW decompressor within X.Org libXfont and various BSD operating systems (OpenBSD, FreeBSD, NetBSD), as well as FreeType. This flaw, related to improper handling of absent code words during decompression, can lead to an infinite loop or a heap-based buffer overflow when processing crafted compressed streams. With a CVSS score of 9.3, it poses a high risk of arbitrary code execution, requiring medium attack complexity but no authentication. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.1.9CPE matchmatch criteria
cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*
<= 1.4.3CPE matchmatch criteria
cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*
1.2.0CPE matchmatch criteria
cpe:2.3:a:x:libxfont:1.2.0:*:*:*:*:*:*:*
1.2.1CPE matchmatch criteria
cpe:2.3:a:x:libxfont:1.2.1:*:*:*:*:*:*:*
1.2.2CPE matchmatch criteria
cpe:2.3:a:x:libxfont:1.2.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
8.36%
Probability of exploitation in next 30 days
EPSS Percentile
94.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0835 is in the 73rd percentile among its peer group of 8,914 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: xorg-x11-0:6.8.2-1.EL.69
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: freetype-0:2.1.9-19.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: libXfont-0:1.2.2-1.0.4.el5_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.6 EUS - Server OnlyFixed in: libXfont-0:1.2.2-1.0.3.el5_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: libXfont-0:1.4.1-2.el6_1
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: mailx

Vendor Advisories (1)

redhatCVE-2011-2895Important

BSD compress LZW decoder buffer overflow

Aug 10, 2011

References

cgit.freedesktop.org / xorg/lib/libXfont/commit
Patch
ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc
lists.apple.com / archives/security-announce/2012/Feb/msg00000.html
lists.apple.com / archives/security-announce/2012/May/msg00001.html
lists.apple.com / archives/security-announce/2015/Dec/msg00000.html
lists.apple.com / archives/security-announce/2015/Dec/msg00001.html
lists.apple.com / archives/security-announce/2015/Dec/msg00002.html
lists.apple.com / archives/security-announce/2015/Dec/msg00005.html
lists.freedesktop.org / archives/xorg-announce/2011-August/001721.html
Patch
lists.freedesktop.org / archives/xorg-announce/2011-August/001722.html
Patch
lists.opensuse.org / opensuse-security-announce/2011-09/msg00019.html
lists.opensuse.org / opensuse-security-announce/2011-12/msg00004.html
bugzilla.redhat.com / show_bug.cgi
Patch
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/45544
Vendor Advisory
secunia.com / advisories/45568
Vendor Advisory
secunia.com / advisories/45599
Vendor Advisory
secunia.com / advisories/45986
secunia.com / advisories/46127
secunia.com / advisories/48951
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/69141
support.apple.com / HT205635
support.apple.com / HT205637
support.apple.com / HT205640
support.apple.com / HT205641
support.apple.com / kb/HT5130
support.apple.com / kb/HT5281
debian.org / security/2011/dsa-2293
mandriva.com / security/advisories
openbsd.org / cgi-bin/cvsweb/src/usr.bin/compress/zopen.c
openwall.com / lists/oss-security/2011/08/10/10
redhat.com / support/errata/RHSA-2011-1154.html
Vendor Advisory
redhat.com / support/errata/RHSA-2011-1155.html
Vendor Advisory
redhat.com / support/errata/RHSA-2011-1161.html
Vendor Advisory
redhat.com / support/errata/RHSA-2011-1834.html
securityfocus.com / bid/49124
ubuntu.com / usn/USN-1191-1