Search CVE reports
1 – 10 of 18 results
CVE-2024-25082
Medium prioritySplinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Not affected | Fixed | Fixed | Fixed | Fixed |
CVE-2024-25081
Medium prioritySplinefont in FontForge through 20230101 allows command injection via crafted filenames.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Not affected | Fixed | Fixed | Fixed | Fixed |
CVE-2020-25690
Medium priorityAn out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the...
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2020-5496
Medium priorityFontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Not affected | Not affected | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2020-5395
Medium priorityFontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Not affected | Not affected | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2019-15785
Medium priorityFontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | — | — | — | Not affected | Not affected |
CVE-2017-17521
Low priorityuiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted...
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
CVE-2017-11573
Low priorityFontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
CVE-2017-11570
Low priorityFontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
CVE-2017-11577
Medium prioritySome fixes available 2 of 4
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
1 affected packages
fontforge
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| fontforge | — | — | — | Not affected | Fixed |