CVE-2025-50949

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.(CVE-2025-50949)

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.

These are all security issues fixed in the fontforge-20251009-2.1 package on the GA media of openSUSE Tumbleweed.

This update for fontforge fixes the following issues:

• CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).

This update for fontforge fixes the following issues:

Update to version 20251009.

Security issues fixed:

• CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013).
• CVE-2025-15269: remote code execution via use-after-free in SFD file parsing (bsc#1256032).
• CVE-2025-15275: arbitrary code execution via SFD file parsing buffer overflow (bsc#1256025).
• CVE-2025-50949: memory leak in function DlgCreate8 (bsc#1252652).

Other updates and bugfixes:

• fix multiple crashes in Multiple Masters.

• fix crash for content over 32767 characters in GDraw multiline text field.

• fix crash on Up/Down

• fix crash in Metrics View.

• fix UFO crash for empty contours.

• fix crash issue in allmarkglyphs.

• Version update to 20251009:

  • Update documentation for py scripts (#5180)
  • Update GitHub CI runners (#5328)
  • Update po files from Croudin sources. (#5330)
  • Use consistent Python in MacOS GitHub runner (#5331)
  • Fix CI for Windows GitHub runner (#5335)
  • Fix lookup flags parsing (#5338)
  • Fixes (#5332): glyph file names uXXXXX (#5333)
  • make harmonization robust and avoid zero handles after harmonization (#5262)
  • Quiet strict prototypes warnings. (#5313)
  • Fix crash in parsegvar() due to insufficient buffer (#5339)
  • Handle failed iconv conversion. Unhandled execution path was UB, causing a segfault for me (#5329)
  • Fix CMake function _get_git_version() (#5342)
  • Don't require individual tuple encapsulation in fontforge.font.bitmapSizes setter (#5138)
  • nltransform of anchor points (#5345)
  • Fix generateFontPostHook being called instead of generateFontPreHook (#5226)
  • Always set usDefaultChar to 0 (.notdef) (#5242)
  • add font attributes, method to Python docs (#5353)
  • fix segfault triggered by Python del c[i:j] (#5352)
  • Autoselect internal WOFF2 format (#5346)
  • Fix typos in the FAQ (#5355)
  • add font.style_set_names attribute to Python API (#5354)
  • Bulk tester (#5365)
  • Fix Splinefont shell invocation (#5367)
  • Fix the lists of Windows language IDs (#5359)
  • Support suplementary planes in SFD (emojis etc.) (#5364)
  • Remove psaltnames for multi-code-point names (#5305)
  • doc: added missing sudo to installation instructions (#5300)
  • Fix data corruption on SFD reading (#5380)
  • Compare vertical metrics check when generating TTC (#5372)
  • Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)
  • Don't attempt to copy anchors into NULL font (#5405)
  • Fix export of supplementary plane characters in font name to TTF (#5396)
  • Defer crowdin update to the end of the pipeline (#5409)
  • Fix generated feature file bugs (#5384)
  • crowdin: update to java 17 (#5447)
  • Remove assert from Python script processor (#5410)
  • Use sysconfig for Python module locations (#5423)
  • Use PyConfig API on Python 3.8 (#5404)
  • Fix resource leak in unParseTTInstrs (#5476)
  • Only install GUI-specific files if ENABLE_GUI is set (#5451)
  • add math device tables to Python API (#5348)
  • Update CI runner to macOS 13 (#5482)
  • Allow hyphen and special characters in Feature File glyph names (#5358)
  • Fix Python font.appendSFNTName() function (#5494)
  • Update mm.c (#5386)
  • Warning rollup (probably some hidden bugs!) from clang trunk (#5492)
  • Fix function PyFFFont_addSmallCaps. (#5519)
  • Make SmallCaps() create symbols (#5517)
  • Segfault fix and complete implementation of "Don't generate FFTM tables" (#5509)
  • Modernize fixed pitch flag computation (#5506)
  • fix memleak in function utf7toutf8_copy (#5495)
  • Avoid crashes in Python scripts when objects are accessed in invalid state (#5483)
  • Fix CI for Ubuntu 24 (#5531)
  • Bump GitHub CI runner to Ubuntu 22 (#5551)
  • Fix memory corruption in SFUnicodeRanges() (#5537)
  • Add contour draw option to H.Metrics. (#5496)
  • Fix scaling of references in CharView (#5558)
  • Fix TTF validation on load for fixed pitch fonts (#5562)
  • Performance fixes for GSUB/GPOS dumps…

This update for fontforge fixes the following issues:

• CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. (bsc#1252652)

This update for fontforge fixes the following issues:

• CVE-2025-50949: Fixed memory leak in function DlgCreate8 (bsc#1252652).

This update for fontforge fixes the following issues:

Update to version 20251009.

Security issues fixed:

• CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013).
• CVE-2025-15269: remote code execution via use-after-free in SFD file parsing (bsc#1256032).
• CVE-2025-15275: arbitrary code execution via SFD file parsing buffer overflow (bsc#1256025).
• CVE-2025-50949: memory leak in function DlgCreate8 (bsc#1252652).

Other updates and bugfixes:

• fix multiple crashes in Multiple Masters.

• fix crash for content over 32767 characters in GDraw multiline text field.

• fix crash on Up/Down

• fix crash in Metrics View.

• fix UFO crash for empty contours.

• fix crash issue in allmarkglyphs.

• Version update to 20251009:

  • Update documentation for py scripts (#5180)
  • Update GitHub CI runners (#5328)
  • Update po files from Croudin sources. (#5330)
  • Use consistent Python in MacOS GitHub runner (#5331)
  • Fix CI for Windows GitHub runner (#5335)
  • Fix lookup flags parsing (#5338)
  • Fixes (#5332): glyph file names uXXXXX (#5333)
  • make harmonization robust and avoid zero handles after harmonization (#5262)
  • Quiet strict prototypes warnings. (#5313)
  • Fix crash in parsegvar() due to insufficient buffer (#5339)
  • Handle failed iconv conversion. Unhandled execution path was UB, causing a segfault for me (#5329)
  • Fix CMake function _get_git_version() (#5342)
  • Don't require individual tuple encapsulation in fontforge.font.bitmapSizes setter (#5138)
  • nltransform of anchor points (#5345)
  • Fix generateFontPostHook being called instead of generateFontPreHook (#5226)
  • Always set usDefaultChar to 0 (.notdef) (#5242)
  • add font attributes, method to Python docs (#5353)
  • fix segfault triggered by Python del c[i:j] (#5352)
  • Autoselect internal WOFF2 format (#5346)
  • Fix typos in the FAQ (#5355)
  • add font.style_set_names attribute to Python API (#5354)
  • Bulk tester (#5365)
  • Fix Splinefont shell invocation (#5367)
  • Fix the lists of Windows language IDs (#5359)
  • Support suplementary planes in SFD (emojis etc.) (#5364)
  • Remove psaltnames for multi-code-point names (#5305)
  • doc: added missing sudo to installation instructions (#5300)
  • Fix data corruption on SFD reading (#5380)
  • Compare vertical metrics check when generating TTC (#5372)
  • Treat FT_PIXEL_MODE_MONO as 2 grey levels (#5379)
  • Don't attempt to copy anchors into NULL font (#5405)
  • Fix export of supplementary plane characters in font name to TTF (#5396)
  • Defer crowdin update to the end of the pipeline (#5409)
  • Fix generated feature file bugs (#5384)
  • crowdin: update to java 17 (#5447)
  • Remove assert from Python script processor (#5410)
  • Use sysconfig for Python module locations (#5423)
  • Use PyConfig API on Python 3.8 (#5404)
  • Fix resource leak in unParseTTInstrs (#5476)
  • Only install GUI-specific files if ENABLE_GUI is set (#5451)
  • add math device tables to Python API (#5348)
  • Update CI runner to macOS 13 (#5482)
  • Allow hyphen and special characters in Feature File glyph names (#5358)
  • Fix Python font.appendSFNTName() function (#5494)
  • Update mm.c (#5386)
  • Warning rollup (probably some hidden bugs!) from clang trunk (#5492)
  • Fix function PyFFFont_addSmallCaps. (#5519)
  • Make SmallCaps() create symbols (#5517)
  • Segfault fix and complete implementation of "Don't generate FFTM tables" (#5509)
  • Modernize fixed pitch flag computation (#5506)
  • fix memleak in function utf7toutf8_copy (#5495)
  • Avoid crashes in Python scripts when objects are accessed in invalid state (#5483)
  • Fix CI for Ubuntu 24 (#5531)
  • Bump GitHub CI runner to Ubuntu 22 (#5551)
  • Fix memory corruption in SFUnicodeRanges() (#5537)
  • Add contour draw option to H.Metrics. (#5496)
  • Fix scaling of references in CharView (#5558)
  • Fix TTF validation on load for fixed pitch fonts (#5562)
  • Performance fixes for GSUB/GPOS dumps…