Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2025/12/31 6:59 a.m.42 views

CVE-2025-15277 FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.00246EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 6:59 a.m.10 views

EUVD-2025-205889

FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.1AI score0.00246EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/31 6:59 a.m.11 views

CVE-2025-15277 FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.6AI score
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/12/29 12:0 a.m.9 views

(0Day) FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pixels...

7.8CVSS7.4AI score0.0025EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2025/12/29 12:0 a.m.5 views

(0Day) FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of scanlines...

7.8CVSS7.2AI score0.00246EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-53826

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge’s handling of BMP file pixel parsing, potentially allowing a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as visiting a...

8.8CVSS7.9AI score0.00552EPSS
SaveExploits0References51
Rows per page
Query Builder