SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2020:0118-1)

This update for fontforge fixes the following issues : CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. Note that Tenable Network Security has extracted the preceding description block...

SUSE-SU-2020:0118-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...

CVE-2020-5395

An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens. The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code...

FontForge Resource Management Error Vulnerability

FontForge is an open source font editing tool that supports multiple languages. A resource management error vulnerability exists in the 'SFDGetFontMetaData' function of the sfd.c file in FontForge version 20190801. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

FontForge buffer overflow vulnerability (CNVD-2020-01920)

FontForge is an open source font editing tool that supports multiple languages. A buffer overflow vulnerability exists in the 'Type2NotDefSplines' function of the splinesave.c file in FontForge version 20190801. The vulnerability stems from a networked system or product performing operations in...

CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

DEBIAN-CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

UBUNTU-CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

Heap overflow

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

DEBIAN-CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

UBUNTU-CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

Code injection

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

CVE-2020-5395

FontForge 20190801 has a use-after-free in SFDGetFontMetaData in sfd.c...

CVE-2020-5496

FontForge 20190801 is affected by a heap-based buffer overflow in Type2NotDefSplines() (splinesave.c) linked to CVE-2020-5496. Connected advisories confirm the issue across multiple distros, e.g., openSUSE openSUSE-2020:89, Debian DLA-3754-1, SUSE-SU-2020:0118-1, Mageia MGASA-2020-0057, and Gento...