Lucene search
+L

885 matches found

Cvelist
Cvelist
•added 2025/12/31 6:59 a.m.•47 views

CVE-2025-15272 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS0.00609EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/12/31 6:59 a.m.•21 views

CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.3AI score0.00609EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 6:58 a.m.•19 views

EUVD-2025-205896

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7AI score0.0061EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/12/31 6:58 a.m.•20 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 6:58 a.m.•52 views

CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.0061EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 6:58 a.m.•3 views

CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 6:58 a.m.•47 views

CVE-2025-15271

FontForge (SFD file parser) is affected by CVE-2025-15271 due to improper validation of array indices, causing a write past the end of an allocated array. The flaw enables remote code execution with user interaction (the target must open a malicious SFD or visit a crafted page). The vulnerability...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•19 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/12/31 6:58 a.m.•5 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/12/31 6:58 a.m.•10 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•9 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0
CVE
CVE
•added 2025/12/31 6:58 a.m.•67 views

CVE-2025-15270

FontForge SFD File Parsing vulnerabilities (CVE-2025-15270) arise from improper validation of data while parsing SFD files, causing out-of-bounds writes and remote code execution. The connected Mageia advisory confirms a FontForge fix in updated packages; other sources describe the same issue and...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/31 6:58 a.m.•42 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.0061EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 6:58 a.m.•13 views

EUVD-2025-205897

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/31 6:58 a.m.•54 views

CVE-2025-15269

FontForge vulnerability CVE-2025-15269 is a Use-After-Free in SFD file parsing that enables remote code execution. The flaw stems from not validating the existence of an object before operations, allowing an attacker to run code in the user’s context after the target opens a crafted SFD file/page...

8.8CVSS8.2AI score0.00533EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2025/12/31 6:58 a.m.•7 views

CVE-2025-15269

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.2AI score0.00533EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 6:58 a.m.•6 views

EUVD-2025-205898

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.2AI score0.00533EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•7 views

CVE-2025-15269

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.2AI score0.00533EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/12/31 6:58 a.m.•4 views

CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.2AI score0.00533EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 6:58 a.m.•40 views

CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS0.00533EPSS
SaveExploits0References1
Rows per page
Query Builder