CVE-2025-15273

CVE-2025-15273 concerns FontForge’s PFB file parsing. The issue is a stack-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a fixed-size stack buffer, enabling remote code execution. It requires user interaction (target visits a malicio...