CVE-2026-33812
published 2026-04-21CVE-2026-33812: Parsing a malicious font file can cause excessive memory allocation.
medium6.1CVSS 3.1
AVLACLPRNUIRSUCLINAH
Parsing a malicious font file can cause excessive memory allocation.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ansible-automation-platform | platform-operator-bundle | — | — |
| cryostat | cryostat-storage-rhel9 | — | — |
| go-toolset_rhel8 | golang | — | — |
| golang.org | x_image_golang.org_x_image_font_sfnt | < 0.39.0 | 0.39.0 |
| golang | image | < 0.39.0 | 0.39.0 |
| multicluster-globalhub | multicluster-globalhub-grafana-rhel9 | — | — |
| openshift-gitops-1 | argocd-rhel8 | — | — |
| openshift-gitops-1 | argocd-rhel9 | — | — |
| openshift-logging | cluster-logging-rhel9-operator | — | — |
| openshift-serverless-1 | kn-plugin-event-sender-rhel9 | — | — |
| openshift-service-mesh | istio-rhel8-operator | — | — |
| openshift4 | ose-tests-rhel9 | — | — |
| rhacm2 | acm-grafana-rhel9 | — | — |
| rhacm2 | volsync-rhel9 | — | — |
| rhoai | odh-model-registry-rhel9 | — | — |
| rhoso-operators | openstack-operator-bundle | — | — |