FO
Vendor
FontForge
31
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-15279 | FO FontForge FontForge | 7.8 | Dec 31 | FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15278 | FO FontForge FontForge | 7.8 | Dec 31 | FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15277 | FO FontForge FontForge | 7.8 | Dec 31 | FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15276 | FO FontForge FontForge | 7.8 | Dec 31 | FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2025-15280 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability |
| CVE-2025-15275 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15274 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15273 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15272 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-15271 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability |
| CVE-2025-15270 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability |
| CVE-2025-15269 | FO FontForge FontForge | 8.8 | Dec 31 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability |
| CVE-2025-50949 | FO Fontforge Fontforge | 6.5 | Oct 23 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8 |
| CVE-2025-50951 | FO Fontforge Fontforge | 6.5 | Oct 23 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c |
| CVE-2024-25082 | FO Fontforge Fontforge | 6.5 | Feb 26 | Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files |
| CVE-2024-25081 | FO Fontforge Fontforge | 4.2 | Feb 26 | Splinefont in FontForge through 20230101 allows command injection via crafted filenames |
| CVE-2020-25690 | FO Fontforge Fontforge | 8.8 | Feb 23 | An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens |
| CVE-2020-5496 | FO Fontforge Fontforge | 8.8 | Jan 3 | FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c |
| CVE-2020-5395 | FO Fontforge Fontforge | 8.8 | Jan 3 | FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c |
| CVE-2019-15785 | FO Fontforge Fontforge | 9.8 | Aug 29 | FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c |
| CVE-2017-17521 | FO Fontforge Fontforge | 8.8 | Dec 14 | uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to… |
| CVE-2017-11577 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11576 | FO Fontforge Fontforge | 5.5 | Jul 23 | FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file |
| CVE-2017-11575 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the… |
| CVE-2017-11574 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11573 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11572 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11571 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11570 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11569 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file |
| CVE-2017-11568 | FO Fontforge Fontforge | 7.8 | Jul 23 | FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file |