831 matches found
Fedora 42 : fontforge (2026-3dbd8c4b89)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3dbd8c4b89 advisory. Resolves: CVE-2025-15270 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Exploit for Command Injection in Fontforge
⚠️ CVE-2024-25082 - FontForge ZIP Remote Code Execution PoC...
Exploit for Deserialization of Untrusted Data in Fontforge
No d...
Exploit for Command Injection in Fontforge
⚠️ FontForge RCE — CVE-2024-25081 & CVE-2024-25082 - PoC 📖...
Unity Linux 20.1070e Security Update: fontforge (UTSA-2026-006171)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006171 advisory. FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. Tenable has extracted the preceding description block directly from the Uni...
TencentOS Server 4: fontforge (TSSA-2026:0108)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0108 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
SUSE: Security Advisory (SUSE-SU-2026:20435-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2023 : fontforge, fontforge-devel (ALAS2023-2026-1431)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1431 advisory. FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
Important: fontforge
Issue Overview: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the...
Amazon Linux 2 : fontforge, --advisory ALAS2-2026-3164 (ALAS-2026-3164)
The version of fontforge installed on the remote host is prior to 20120731b-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3164 advisory. FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows...
SUSE SLES16 Security Update : fontforge (SUSE-SU-2026:20435-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20435-1 advisory. Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP...
Important: fontforge
Issue Overview: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the...
openSUSE 16 Security Update : fontforge (openSUSE-SU-2026:20235-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20235-1 advisory. Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing...
SUSE-SU-2026:20435-1 Security update for fontforge
This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing bsc1256013. - CVE-2025-15269: remote code execution via use-after-free in SFD file parsing bsc1256032...
RHSA-2026:2566 Red Hat Security Advisory: fontforge security update
Bulletin has no description...
fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing
A flaw was found in FontForge. This use-after-free vulnerability, occurring during the parsing of SFD Spline Font Database files, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a...
fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing
A flaw was found in FontForge. This heap-based buffer overflow vulnerability occurs during the parsing of pixels within BMP Bitmap files, due to insufficient validation of user-supplied data length. A remote attacker could exploit this by tricking a user into opening a malicious BMP file or...
fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow
A flaw was found in FontForge. A remote attacker could exploit a heap-based buffer overflow vulnerability during SFD file parsing. This issue arises from insufficient validation of user-supplied data length before copying it to a buffer. Successful exploitation requires user interaction, such as...
Important: Red Hat Security Advisory: fontforge security update
An update for fontforge is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...