Linux Distros Unpatched Vulnerability : CVE-2010-4259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

openSUSE Security Advisory (SUSE-SU-2024:0864-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53816

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to improper validation when parsing SFD files. This can lead to a use-after-free condition, potentially allowing a remote attacker to execute arbitrary code...

PT-2025-53817

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to the parsing of SFD files. Insufficient validation of user-supplied data can lead to a write past the end of an allocated array, potentially allowing a...

PT-2025-53822

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to insufficient validation of the length of user-supplied data when parsing SFD files. This can allow a remote attacker to execute arbitrary code in the conte...

PT-2025-53826

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge’s handling of BMP file pixel parsing, potentially allowing a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as visiting a...

Oracle Linux 9 : fontforge (ELSA-2024-9439)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9439 advisory. 20201107-6 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws Tenable has extracted the preceding description block...

RHSA-2024:9439 Red Hat Security Advisory: fontforge security update

Bulletin has no description...

fontforge security update

20201107-6 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws...

fontforge: command injection via crafted filenames

Splinefont in FontForge through 20230101 allows command injection via crafted filenames...

Moderate: Red Hat Security Advisory: fontforge security update

An update for fontforge is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

RHEL 9 : fontforge (RHSA-2024:9439)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9439 advisory. FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1,...

ALSA-2024:9439 Moderate: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: command injection via crafted archives or compressed files...

Moderate: fontforge security update

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts. Security Fixes: fontforge: command injection via crafted archives or compressed files...

RHSA-2024:4267 Red Hat Security Advisory: fontforge security update

Bulletin has no description...

RHSA-2020:4844 Red Hat Security Advisory: fontforge security update

Bulletin has no description...

RHSA-2020:3966 Red Hat Security Advisory: fontforge security update

Bulletin has no description...

RHSA-2020:1921 Red Hat Security Advisory: fontforge security update

Bulletin has no description...

ROS-20240827-08

Vulnerability in FontForge font editing software exists due to failure to take measures to neutralization of special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...