pkg:Debian/fontforge

All known vulnerabilities

• HIGH8.8CVE-2025-15280FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability.
  from 0
• HIGH8.8CVE-2025-15275FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH8.8CVE-2025-15274FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability.
  from 0
• HIGH8.8FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
  from 0, < 1:20201107~dfsg-1
• HIGH8.8fontforge - security update
  from 0, < 1:20201107~dfsg-1
• HIGH8.8fontforge - security update
  from 0, < 1:20170731~dfsg-1+deb10u1
• HIGH8.8uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable…
  from 0
• HIGH7.8FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH7.8FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH7.8FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
  from 0
• HIGH7.8FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability.
  from 0
• HIGH7.8FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
  from 0, < 1:20170731~dfsg-1
• HIGH7.8FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, rel…
  from 0, < 1:20170731~dfsg-1
• HIGH7.8FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafte…
  from 0, < 1:20170731~dfsg-1
• HIGH7.8FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a…
  from 0
• HIGH7.8FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a…
  from 0, < 1:20170731~dfsg-1
• HIGH7.8FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafte…
  from 0, < 1:20170731~dfsg-1
• HIGH7.8FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
  from 0
• HIGH7.8FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via…
  from 0, < 1:20170731~dfsg-1
• HIGH7.8fontforge - security update
  from 0, < 1:20170731~dfsg-1
• HIGH7.8fontforge - security update
  from 0, < 0.0.20120101+git-2+deb7u1
• HIGH7.8fontforge - security update
  from 0, < 20120731.b-5+deb8u1
• MEDIUM6.5FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.
  from 0
• MEDIUM6.5FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
  from 0
• MEDIUM6.5Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
  from 0, < 1:20201107~dfsg-4+deb11u1
• MEDIUM5.5FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a cra…
  from 0, < 1:20170731~dfsg-1
• MEDIUM4.2fontforge - security update
  from 0, < 1:20201107~dfsg-4+deb11u1
• MEDIUM4.2fontforge - security update
  from 0, < 1:20201107~dfsg-4+deb11u1
• —fontforge - buffer overflow
  from 0, < 0.0.20080429-1+lenny2
• —fontforge - buffer overflow
  from 0, < 0.0.20100501-4