CVE-2024-25081

2024-02-2600:00:00

mitre

github.com

cve-2024-25081

fontforge

splinefont

command injection

crafted filenames

AI Score

4.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:fontforge:fontforge:20230101:*:*:*:*:*:*:*"
    ],
    "vendor": "fontforge",
    "product": "fontforge",
    "versions": [
      {
        "status": "affected",
        "version": "20230101"
      }
    ],
    "defaultStatus": "unknown"
  }
]