881 matches found
CVE-2017-11569
CVE-2017-11569 affects FontForge 20161012, with a heap-based buffer over-read in readttfcopyrights (parsettf.c) that can lead to DoS or code execution via a crafted OpenType font. Multiple linked advisories note the issue and document fixes in later releases (e.g., Mageia MGASA-2018-0037 and SUSE...
CVE-2017-11576
CVE-2017-11576 affects FontForge (min. FontForge 20161012). The root cause is a check failure in a weight vector memcpy in readcfftopdict (parsettf.c), which can lead to a denial of service or recovery via a crafted OpenType font file. Public sources in connected documents confirm the vulnerabili...
CVE-2017-11571
FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11572
CVE-2017-11572 : FontForge 20161012 has a heap-based buffer over-read in readcfftopdicts (parsettf.c) that can lead to DoS or arbitrary code execution via a crafted OpenType font. Multiple connected advisories confirm this issue and document fixes in newer FontForge packages (e.g., updated to 201...
CVE-2017-11574
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11573
FontForge 20161012 is affected by a buffer over-read in ValidatePostScriptFontName (parsettf.c), allowing DoS or code execution via a crafted OTF file. Multiple sources (NVD, Red Hat, SUSE, OSV references) confirm the issue (CVE-2017-11573). SUSE OSV notes a patch/update to 20170731 addressing th...
CVE-2017-11570
FontForge 20161012 is vulnerable to a buffer over-read in umodenc parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11577
FontForge 20161012 is vulnerable to a buffer over-read in getsid parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11569
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11571
FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11568
FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11574
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11577
FontForge 20161012 is vulnerable to a buffer over-read in getsid parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11574
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) triggered by a crafted OpenType font, leading to DoS or code execution. Public sources in connected documents show a fixed update (fontforge 20170731 per OSV SUSE-SU-2019:2236-1) and Mageia/Mageia advisori...
CVE-2017-11570
FontForge 20161012 is affected by a buffer over-read in umodenc (parsettf.c) that can lead to DoS or code execution when processing a crafted otf file. Root cause: buffer over-read in font parsing of TrueType/OpenType glyph data. Impact is dependent on attacker-controlled font files; in the publi...
CVE-2017-11568
FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11572
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts parsettf.c resulting in DoS or code execution via a crafted otf file...
CVE-2017-11570
FontForge 20161012 is vulnerable to a buffer over-read in umodenc parsettf.c resulting in DoS or code execution via a crafted otf file...