CVE-2026-47318: Cpp Freetype Bezier Stack Overflow

A stack-based buffer overflow can occur when recursively splitting cubic Bezier curves without enforcing a depth limit. The pointer tracking the current curve on the stack is advanced blindly, leading to out-of-bounds writes on the fixed-size bezier stack. Ensure stack bounds are checked before splitting.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++β
greprules fetch cve-2026-47318-cpp-freetype-bezier-stack-overflow --engine opengrep

Description

A stack-based buffer overflow can occur when recursively splitting cubic Bezier curves without enforcing a depth limit. The pointer tracking the current curve on the stack is advanced blindly, leading to out-of-bounds writes on the fixed-size bezier stack. Ensure stack bounds are checked before splitting.