CVE-2026-33812

CVE-2026-33812 is a memory allocation vulnerability triggered by parsing malicious font files, affecting systems that process untrusted font inputs. The flaw allows an attacker to cause excessive memory consumption on a local system through a relatively simple attack vector requiring minimal user interaction. The vulnerability carries a CVSS score of 6.1 (Medium severity) with a local attack vector, low attack complexity, and no privilege requirements. While confidentiality impact is limited, the vulnerability poses a significant availability threat through denial of service via memory exhaustion. The EPSS score of 0.00012 indicates minimal exploitation prevalence currently. There is no evidence of active exploitation in the wild, and the vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog or active threat lists. Community attention remains low, suggesting this represents a moderate-priority remediation target for organizations using affected font processing libraries. Organizations should prioritize patching based on their exposure to untrusted font file sources.