Galaxy users on Reddit started noticing that their custom fonts just stopped working after installing the March 2026 update. The issue is showing up on phones running both One UI 8.5 and One UI 8, so it doesn’t matter which software version you’re on.
Some users can’t switch to a custom font at all anymore. Others found that just trying to change fonts made the one they were already using completely unusable, with error messages showing up out of nowhere.
This is where the story takes a turn. In a new report, PiunikaWeb looked into what Samsung actually changed with this update and found it patched a security flaw (tracked as CVE-2026-20989) tied to how fonts get installed on Galaxy phones.Put simply, there was a backdoor in how Samsung handled font installations. Third-party font apps were using that opening to let you install fonts Samsung hadn’t officially approved. This update closed that door. The developer behind zFont 3, one of the most popular font apps out there, has confirmed that Samsung’s patch blocks the exact method their app relied on.
So this isn’t a bug. Samsung intentionally tightened things up, and custom fonts got caught in the crossfire.
Fonts you’ve downloaded through Samsung’s own Galaxy Store should still work just fine. But if you’ve been using third party apps to access a much wider variety of fonts, you’re out of luck for now.This is a tough one for many Galaxy fans. One of Android’s (in this case, Samsung) biggest advantages over iPhones has always been the freedom to make your phone truly yours, and that’s something we’ve celebrated in our coverage of One UI 8.5. Restricting how users personalize their devices, even for a valid reason, chips away at that identity.
I understand why Samsung patched this. Closing security gaps matters, and I’d rather have a secure phone than a pretty font. But the way this played out, with no warning, resulted in users waking up to broken fonts and confusing error messages. That said, they can always fall back on the fact that it wasn’t an official method anyway.
Leave a comment