Fontforge vulnerabilities

Products

• Fontforge 31

Newest

• fontforge FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15279 Fix available 7.8 HighDecember 31, 2025
• fontforge FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability CVE-2025-15278 7.8 HighDecember 31, 2025
• fontforge FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15277 7.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-15276 Public exploit 7.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability CVE-2025-15280 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15275 Fix available 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15274 8.8 HighDecember 31, 2025
• fontforge FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15273 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-15272 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2025-15271 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2025-15270 Fix available 8.8 HighDecember 31, 2025
• fontforge FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability CVE-2025-15269 Fix available 8.8 HighDecember 31, 2025
• fontforge FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at ... CVE-2025-50951 6.5 MediumOctober 23, 2025
• fontforge FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. CVE-2025-50949 Fix available 6.5 MediumOctober 23, 2025
• fontforge, debian linux, fedoraproject fedora +2 more Splinefont in FontForge through 20230101 allows command injection via crafted archives or... CVE-2024-25082 Public exploitFix available 6.5 MediumFebruary 26, 2024
• fontforge, debian linux, fedoraproject fedora +2 more Splinefont in FontForge through 20230101 allows command injection via crafted filenames. CVE-2024-25081 Public exploitFix available 4.2 MediumFebruary 26, 2024
• fontforge An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD... CVE-2020-25690 Fix available 8.8 HighNovember 3, 2020
• fontforge, opensuse leap +1 more FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in... CVE-2020-5496 Fix available 8.8 HighJanuary 3, 2020
• fontforge, fedoraproject fedora, opensuse leap +2 more FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c. CVE-2020-5395 Fix available 8.8 HighJanuary 3, 2020
• fontforge FontForge through 20190801 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c. CVE-2019-15785 9.8 CriticalAugust 29, 2019
• fontforge uiutil.c in FontForge through 20170731 does not validate strings before launching the program... CVE-2017-17521 Fix available 8.8 HighDecember 14, 2017
• fontforge FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c)... CVE-2017-11573 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS... CVE-2017-11570 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or... CVE-2017-11577 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in... CVE-2017-11576 Fix available 5.5 MediumJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or... CVE-2017-11575 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c)... CVE-2017-11574 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c)... CVE-2017-11572 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c)... CVE-2017-11571 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf... CVE-2017-11569 Fix available 7.8 HighJuly 23, 2017
• fontforge FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines ... CVE-2017-11568 Fix available 7.8 HighJuly 23, 2017