Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

EUVD-2025-35700

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

DEBIAN-CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

PT-2025-43527

Name of the Vulnerable Software and Affected Versions FontForge version 20230101 Description A memory leak exists in FontForge through the DlgCreate8 component. The issue involves a memory leak, potentially leading to resource exhaustion. Recommendations At the moment, there is no information abo...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge that supports multiple languages. A security vulnerability exists in FontForge version v20230101, which originates from a memory leak in component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge open source that supports multiple languages. A security vulnerability exists in version v20230101, which stems from a memory leak in the utf7toutf8copy function...

CVE-2025-50949

FontForge v20230101 is vulnerable to a memory leak occurring within the DlgCreate8 component. This issue is confirmed in multiple security advisories, including those for SUSE SLES16 , Unity Linux 20 , and openSUSE 16 . The vulnerability has been addressed in updated versions; for instance, users...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

PT-2024-1853

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...

CVE-2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

FontForge Security Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A security vulnerability exists in FontForge 20230101 and earlier versions, which originates from allowing command injection via specially crafted filenames...