UUM-140975

Fixed in 7000.0.0a11

Mentioned in 4 release notes.

First fixed in 7000.0.0a11 (Oct 20, 2026); relisted in 3 later releases.

Open on Unity Issue Tracker
VersionSectionRiskImpactNote
7000.0.0a16Fixes
Text
SecurityFixed a FreeType vulnerability (CVE-2026-23865) that could cause an out-of-bounds read when loading a malformed variable font.
7000.0.0a12Fixes
Text
SecurityFixed a FreeType vulnerability (CVE-2026-23865) that could cause an out-of-bounds read when loading a malformed variable font.
7000.0.0a11Fixes
Text
SecurityFixed a FreeType vulnerability (CVE-2026-23865) that could cause an out-of-bounds read when loading a malformed variable font.
7000.0.0a11Fixes
Text
SecurityFixed a FreeType vulnerability (CVE-2026-23865) that could cause an out-of-bounds read when loading a malformed variable font.

Pick your Unity version

Unity Releases compares releases against the version your project is on. Picking it now keeps Compare versions focused on what changes between where you are and where you might be going.