PT-2025-53825

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge within the parsing of pixels within XBM files. The issue stems from insufficient validation of user-supplied data, leading to an integer overflow during buffer...

PT-2025-53823

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to insufficient validation of user-supplied data during the parsing of SFD files, leading to deserialization of untrusted data. This can allow a remote attack...

(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

(0Day) FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

(0Day) FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pixels...

(0Day) FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

(0Day) FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PFB files...

(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files...

PT-2025-53819

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to insufficient validation of user-supplied data length before copying it into a heap-based buffer during the parsing of SFD files. This can allow a remote...

openSUSE 16 Security Update : fontforge (openSUSE-SU-2025:20174-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:20174-1 advisory. - CVE-2025-50949: Fixed memory leak in function DlgCreate8 bsc1252652. Tenable has extracted the preceding description block directly from the SUSE...

SUSE-SU-2026:20016-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed memory leak in function DlgCreate8 bsc1252652...

OPENSUSE-SU-2025:20174-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed memory leak in function DlgCreate8 bsc1252652...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2025:4353-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4353-1 advisory. - CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. bsc1252652 Tenable has extracted the...

openSUSE Security Advisory (SUSE-SU-2025:4353-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for fontforge

This update for fontforge fixes the following issues: CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. bsc1252652 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2025:4353-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. bsc1252652...

fontforge-20251009-2.1 on GA media (moderate)

fontforge-20251009-2.1 on GA media Announcement ID: openSUSE-SU-2025:15758-1 Rating: moderate Cross-References: CVE-2025-50949 CVSS scores: CVE-2025-50949 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-50949 SUSE : 4.8...

OPENSUSE-SU-2025:15758-1 fontforge-20251009-2.1 on GA media

These are all security issues fixed in the fontforge-20251009-2.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 4: fontforge (TSSA-2025:0855)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0855 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: fontforge (TSSA-2024:0501)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0501 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...