101 matches found
POC-CVE-2025-66034
fontvarlib.py — CVE-2025-66034 fontTools varLib — Arbitrary File Write + XML Injection → Remote Code Execution Table of Contents Overview Vulnerability Details Attack Chain Requirements Installation Configuration Usage How It Works Vulnerable Code Pre-Exploitation Checklist Tested On Disclaimer...
CVE-2025-66034-htb-ctf
CVE-2025-66034-htb-ctf VariaType Variable Font Generator Exploit This repository contains a specialized exploit for the VariaType machine on Hack The Box. The exploit leverages a vulnerability in how the fontTools library or the web application handles .designspace XML files and metadata...
varlib-cve-2025-66034
fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...
CVE-2025-66034
CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...
CVE-2025-66034
CVE-2025-66034 — fontTools varLib Arbitrary File Write Vulnerability fontTools is a Python library for manipulating font files. Its varLib module processes .designspace files — an XML format that describes how multiple font masters should be interpolated to produce a variable font. Two weaknesses...
python313-FontTools-4.62.1-1.3 on GA media (moderate)
python313-FontTools-4.62.1-1.3 on GA media Announcement ID: openSUSE-SU-2026:11991-1 Rating: moderate Cross-References: CVE-2023-45139 CVSS scores: CVE-2023-45139 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...
PT-2026-105700
These are all security issues fixed in the python313-FontTools-4.62.1-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11991-1 python313-FontTools-4.62.1-1.3 on GA media
These are all security issues fixed in the python313-FontTools-4.62.1-1.3 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-19694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694 Note that Nessus relies on the presence of the package as reported by the...
2dify (1.0.1), a2grunnerp (>=0.1.0, <=0.1.8) +609 more potentially affected by CVE-2025-66034 via fonttools (>=4.33.2, <=4.60.1)
fonttools PYPI version =4.33.2, =0.1.0, =0.0.2, =1.0.0, =0.1.3, =3.9.4, =0.0.1, =1.1.2, =1.5.0 - alertwise 1.0.0 and more Source cves: CVE-2025-66034 Source advisory: OSV:PYSEC-2026-1389...
PYSEC-2026-1389 fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Summary The fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and...
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
SummaryThe fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and a...
a2grunnerp (>=0.1.0, <=0.1.8), abayestest (>=0.0.2, <=0.0.4) +262 more potentially affected by CVE-2023-45139 via fonttools (>=4.28.2, <=4.42.1)
fonttools PYPI version =4.28.2, =0.1.0, =0.0.2, =1.0.0, =3.9.4, =0.0.1, =1.1.2, =23.1.9, =0.3.2, =0.1.0, =0.1.0, =0.2.0 - arctic-ai 0.1.0 and more Source cves: CVE-2023-45139 Source advisory: OSV:PYSEC-2026-1388...
PYSEC-2026-1388 fonttools XML External Entity Injection (XXE) Vulnerability
Summary As of fonttools=4.28.2 the subsetting module has a XML External Entity Injection XXE vulnerability which allows an attacker to resolve arbitrary entities when a candidate font OT-SVG fonts, which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the...
fonttools XML External Entity Injection (XXE) Vulnerability
SummaryAs of fonttools=4.28.2 the subsetting module has a XML External Entity Injection XXE vulnerability which allows an attacker to resolve arbitrary entities when a candidate font OT-SVG fonts, which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the...
Arbitrary Code Execution
Overview fonttools is a Tools to manipulate font files Affected versions of this package are vulnerable to Arbitrary Code Execution due to the parseBlendList function's usage of built-in Python's eval function when parsing TTX font data. An attacker can execute arbitrary scripts by supplying a...
2dify (1.0.1), a2grunnerp (>=0.1.0, <=0.1.8) +663 more potentially affected by unknown CVE via fonttools (>=4.0.0, <=4.61.1)
fonttools PYPI version =4.0.0, =0.1.0, =0.0.2, =1.0.0, =0.1.3, =3.0.1, =0.0.1, =1.1.2, =1.5.0 - alertwise 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-FONTTOOLS-15869939...
Exploit for XML Injection (aka Blind XPath Injection) in Fonttools
CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE...
Advisory ROSA-SA-2026-3220
Software: fonttools 4.49.0 WASP: ROSA-CHROME unaffected versions = fonttools-4.49.0-2 affected versions fonttools-4.49.0-2 CVE-ID: CVE-2025-66034 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Arbitrary file write vulnerability in fontTools varLib allows a remote attacker to execute arbitrary code when...