PT-2024-1853

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...

PT-2024-1850

Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue exists due to the lack of neutralization of special elements in the software. This can allow an attacker to execute arbitrary commands via crafted filenames. The estimated number of...