fontforge: command injection via crafted archives or compressed files

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

DEBIAN-CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge open source that supports multiple languages. A security vulnerability exists in version v20230101, which stems from a memory leak in the utf7toutf8copy function...

FontForge 安全漏洞

FontForge is an open source font editing tool from fontforge that supports multiple languages. A security vulnerability exists in FontForge version v20230101, which originates from a memory leak in component DlgCreate8...

PT-2025-43527

Name of the Vulnerable Software and Affected Versions FontForge version 20230101 Description A memory leak exists in FontForge through the DlgCreate8 component. The issue involves a memory leak, potentially leading to resource exhaustion. Recommendations At the moment, there is no information abo...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8copy function at /fontforge/sfd.c...

CVE-2025-50949

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8...

CVE-2025-50949

Summary: CVE-2025-50949 affects FontForge v20230101, with a memory leak in DlgCreate8. The issue is documented across multiple advisories (SUSE/OpenSUSE SUSE-SU-2025:4353-1, SUSE-SU-2026:20016-1; OpenVAS entries; Amazon Linux ALAS2023-2025-1262 and ALAS2-2025-3063; TencentOS/TSSA-2025:0855), indi...