FO
Product
FontForge
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 25Medium 5Low 0
Watch
Add FontForge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15280 | 8.8 | Dec 31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15275 | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15274 | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15273 | 8.8 | Dec 31 | FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15272 | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15271 | 8.8 | Dec 31 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15270 | 8.8 | Dec 31 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2025-15269 | 8.8 | Dec 31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: aca4f524c6cb14cdc7bc4cd493492a33f5154797 |
| CVE-2020-25690 | 8.8 | Feb 23 | An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens Affected: before 20200314 |
| CVE-2020-5496 | 8.8 | Jan 3 | FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c Affected: 20190801 |
| CVE-2020-5395 | 8.8 | Jan 3 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c Affected: 20190801 |
| CVE-2017-17521 | 8.8 | Dec 14 | uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to… Affected: through 20170731 |
| CVE-2025-15279 | 7.8 | Dec 31 | FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 387146a241b36bcdf6ce229c5a3fe367ed3854a1 |
| CVE-2025-15278 | 7.8 | Dec 31 | FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 88de9b7dc76fbdef9069b7664ecc280f1c15ba2f |
| CVE-2025-15277 | 7.8 | Dec 31 | FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 88de9b7dc76fbdef9069b7664ecc280f1c15ba2f |
| CVE-2025-15276 | 7.8 | Dec 31 | FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 836f4e11e4cb890353393b36c0465ef445e0c4d4 |
| CVE-2017-11577 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11575 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the… Affected: 20161012 |
| CVE-2017-11574 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11573 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11572 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11571 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11570 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11569 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
| CVE-2017-11568 | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file Affected: 20161012 |
Showing 25