Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

EUVD-2025-35700

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

DEBIAN-CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge open source that supports multiple languages. A security vulnerability exists in version v20230101, which stems from a memory leak in the utf7toutf8copy function...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

PT-2025-43527

Name of the Vulnerable Software and Affected Versions FontForge version 20230101 Description A memory leak exists in FontForge through the DlgCreate8 component. The issue involves a memory leak, potentially leading to resource exhaustion. Recommendations At the moment, there is no information abo...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge that supports multiple languages. A security vulnerability exists in FontForge version v20230101, which originates from a memory leak in component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

Summary: CVE-2025-50949 affects FontForge v20230101, with a memory leak in DlgCreate8. The issue is documented across multiple advisories (SUSE/OpenSUSE SUSE-SU-2025:4353-1, SUSE-SU-2026:20016-1; OpenVAS entries; Amazon Linux ALAS2023-2025-1262 and ALAS2-2025-3063; TencentOS/TSSA-2025:0855), indi...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

FontForge Security Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which originates from allowing command injection via specially crafted filenames...

PT-2024-1853

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...