Lucene search

K
osvGoogleOSV:CVE-2024-25082
HistoryFeb 26, 2024 - 4:27 p.m.

CVE-2024-25082

2024-02-2616:27:58
Google
osv.dev
9
splinefont
fontforge
command injection
vulnerability
software

AI Score

7.7

Confidence

High

EPSS

0

Percentile

15.5%

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.