FO
Product
FontForge
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 25Medium 5Low 0
Watch
Add FontForge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-50951 | 6.5 | Oct 23 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c Affected: 2023-01-01 |
| CVE-2025-50949 | 6.5 | Oct 23 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8 Affected: 2023-01-01 |
| CVE-2024-25082 | 6.5 | Feb 26 | Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files Affected: through 20230101 |
| CVE-2017-11576 | 5.5 | Jul 23 | FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file Affected: 20161012 |
| CVE-2024-25081 | 4.2 | Feb 26 | Splinefont in FontForge through 20230101 allows command injection via crafted filenames Affected: through 20230101 |
Showing 5