CVE-2024-25082

🗓️ 26 Feb 2024 16:58:27Reported by mitreType

Splinefont in FontForge allows command injection via crafted files

Reporter	Title	Published	Views	Family All 44
Prion	Command injection	26 Feb 202416:27	–	prion
NVD	CVE-2024-25082	26 Feb 202416:27	–	nvd
Veracode	Command Injection	13 Mar 202415:31	–	veracode
Vulnrichment	CVE-2024-25082	26 Feb 202400:00	–	vulnrichment
UbuntuCve	CVE-2024-25082	26 Feb 202400:00	–	ubuntucve
Redos	ROS-20240827-08	27 Aug 202400:00	–	redos
Cvelist	CVE-2024-25082	26 Feb 202400:00	–	cvelist
RedhatCVE	CVE-2024-25082	26 Feb 202422:02	–	redhatcve
Debian CVE	CVE-2024-25082	26 Feb 202416:27	–	debiancve
OSV	CVE-2024-25082	26 Feb 202416:27	–	osv

Source	Link
github	www.github.com/fontforge/fontforge/pull/5367
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCH22HIO2C6M4BZWF5EYIWVFBXL5BQAH/
fontforge	www.fontforge.org/en-US/downloads/
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00007.html
openwall	www.openwall.com/lists/oss-security/2024/03/08/2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Feb 2024 16:27Current

8.7High risk

Vulners AI Score8.7

CVSS36.5

EPSS0.0004

SSVC

CWE-77