919 matches found
CVE-2024-25081_2025-47273
CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...
CVE-2024-25082
⚠️ CVE-2024-25082 - FontForge ZIP Remote Code Execution PoC Proof-of-Concept exploit for CVE-2024-25082 , a vulnerability affecting FontForge that allows Remote Code Execution RCE through a crafted ZIP archive. This repository demonstrates how the vulnerability can be exploited in a controlled lab...
CVE-2025-15276-poc
CVE-2025-15276: FontForge SFD PickledData Insecure Deserialization RCE Disclaimer This Proof of Concept PoC is for educational purposes and security auditing only. The author is not responsible for any misuse of this information. Unauthorized access to computer systems is illegal. Always obtain...
CVE-2024-25082_CVE-2024-25081
⚠️ FontForge RCE — CVE-2024-25081 & CVE-2024-25082 - PoC 📖 Overview Proof-of-concept exploit for two command injection vulnerabilities in FontForge ≤ 20230101 Splinefont component. CVE| Vector| Trigger ---|---|--- CVE-2024-25081| Crafted filename| Direct file open CVE-2024-25082| Crafted archive...
Astra Linux – Vulnerability in FontForge
Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...
CVE-2026-110648
@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through childprocess.execSync, so shell metacharacter...
CVE-2026-110648
The @offactory/compress-fonts library (versions before 1.1.1 ) is vulnerable to OS command injection . The root cause is the unquoted interpolation of font paths into a FontForge command executed via child_process.execSync . An attacker can supply font files with crafted names containing shell me...
CVE-2026-110648 @offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names
@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through childprocess.execSync, so shell metacharacter...
[SECURITY] Fedora 45 Update: fontforge-20251009-6.fc45
FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...
Rocky Linux 10.1 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_2230)
The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262230 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Executio...
Rocky Linux 9 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2024_9439)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249439 advisory. fontforge: command injection via crafted archives or compressed files CVE-2024-25082 fontforge: command injection via crafted filenames CVE-2024-25081...
Rocky Linux 8 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2024_4267)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244267 advisory. fontforge: command injection via crafted filenames CVE-2024-25081 fontforge: command injection via crafted archives or compressed files CVE-2024-25082...
Rocky Linux 8 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_7677)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20267677 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Execution v...
Rocky Linux 10.1 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource (crlsa-2026_6631)
The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266631 advisory. fontforge: FontForge: Remote Code Execution via malicious SFD file parsing CVE-2025-15270 Tenable has extracted the preceding description block directly from the...
Rocky Linux 9.6 [CIQ] Security Update: fontforge Multiple Vulnerabilities (ciqsa-2026_1397)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261397 advisory. This advisory aggregates security fixes for the fontforge SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2024-25082, CVE-2024-25081, CVE-2025-50949,...
Rocky Linux 9 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource (crlsa-2026_6628)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266628 advisory. fontforge: FontForge: Remote Code Execution via malicious SFD file parsing CVE-2025-15270 Tenable has extracted the preceding description block directly from the CI...
Rocky Linux 9 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_2039)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262039 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Execution v...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fontforge (UTSA-2026-090278)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090278 advisory. An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...
TencentOS Server 2: fontforge (TSSA-2026:1041)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1041 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...