CVE-2025-15276-poc

CVE-2025-15276: FontForge SFD PickledData 안전하지 않은 역직렬화 RCE 면책 조항 본 개념 증명PoC은 교육 목적 및 보안 감사 전용입니다. 작성자는 이 정보의 오용에 대해 책임을 지지 않습니다. 컴퓨터 시스템에 대한 무단 접근은 불법입니다. 항상 시스템에 대한 보안 테스트를 수행하기 전에 명시적 허가를 받으십시오. 취약점 개요 CVE-2025-15276 는 FontForge 버전 20230101 까지 포함에서 발견된 심각한 원격 코드 실행RCE 취약점입니다. 이 결함은 Spline Font...

CVE-2024-25081_2025-47273

CVE-2024-25081 및 CVE-2025-47273 개념 증명 FontForge ≤ 20230101 버전 및 Setuptools 라이브러리 Font Forge를 사용하는 작업을 실행하는 사용자로 권한을 상승시키기 위한 개념 증명입니다. 두 번째 CVE는 민감한 디렉터리에 쓰기 권한이 있는 경우 루트로 권한을 상승시킵니다. 추가 정보: CVE ID| 취약점| 영향 ---|---|--- CVE-2024-25081| 셸로 전달하기 전에 파일 이름을 검증하지 않음| 소유자 사용자 권한으로 명령 주입 CVE-2025-47273|...

Rocky Linux 9 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource (crlsa-2026_6628)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266628 advisory. fontforge: FontForge: Remote Code Execution via malicious SFD file parsing CVE-2025-15270 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 10.1 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_2230)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262230 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Executio...

Rocky Linux 8 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_7677)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20267677 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Execution v...

Rocky Linux 10.1 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource (crlsa-2026_6631)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266631 advisory. fontforge: FontForge: Remote Code Execution via malicious SFD file parsing CVE-2025-15270 Tenable has extracted the preceding description block directly from the...

Rocky Linux 9.6 [CIQ] Security Update: fontforge (ciqsa-2026_1397)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261397 advisory. This advisory aggregates security fixes for the fontforge SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2025-50949. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_2039)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262039 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Execution v...

CVE-2024-25082

⚠️ CVE-2024-25082 - FontForge ZIP 원격 코드 실행 PoC CVE-2024-25082 에 대한 개념 증명 익스플로잇으로, 조작된 ZIP 아카이브를 통해 원격 코드 실행RCE을 허용하는 FontForge 의 취약점입니다. 이 저장소는 통제된 실험실 환경에서 취약점이 어떻게 악용될 수 있는지 보안 연구 및 교육 목적 으로 시연합니다. 취약점 개요 CVE ID: CVE-2024-25082\ 영향받는 소프트웨어: FontForge\ 취약점 유형: 원격 코드 실행\ 공격 벡터: 악성 ZIP 아카이브\ 영향: 조작...

CVE-2024-25082_CVE-2024-25081

⚠️ FontForge RCE — CVE-2024-25081 및 CVE-2024-25082 - PoC 📖 개요 FontForge ≤ 20230101 Splinefont 구성 요소의 두 가지 명령 삽입 취약점에 대한 개념 증명 익스플로잇입니다. CVE| 벡터| 트리거 ---|---|--- CVE-2024-25081| 조작된 파일명| 직접 파일 열기 CVE-2024-25082| 조작된 아카이브 파일명| TAR/ZIP/GZ/BZ2 추출 이 PoC는 CVE-2024-25082 를 대상으로 합니다 — FontForge의 자동 아카이브...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fontforge (UTSA-2026-090278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090278 advisory. An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

TencentOS Server 2: fontforge (TSSA-2026:1041)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1041 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...

Astra Linux – Vulnerability in FontForge

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

Astra Linux – Vulnerability in FontForge

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

Security update for fontforge

This update for fontforge fixes the following issues CVE-2025-15269: Remote Code Execution via Use-After-Free in SFD file parsing bsc1256032. CVE-2025-15275: Arbitrary code execution via SFD file parsing buffer overflow bsc1256025. CVE-2025-15279: Remote Code Execution via heap-based buffer...

SUSE-SU-2026:2739-1 Security update for fontforge

This update for fontforge fixes the following issues - CVE-2025-15269: Remote Code Execution via Use-After-Free in SFD file parsing bsc1256032. - CVE-2025-15275: Arbitrary code execution via SFD file parsing buffer overflow bsc1256025. - CVE-2025-15279: Remote Code Execution via heap-based buffer...

SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2026:2739-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2739-1 advisory. This update for fontforge fixes the following issues - CVE-2025-15269: Remote Code Execution via Use-After-Fre...

TencentOS Server 3: fontforge (TSSA-2026:0357)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0357 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...