https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:06:32.886676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:4267 ALSA-2024:4267 — Moderate: fontforge security update 2026-10-07T19:06:32.902940+00:00

Affected: AlmaLinux:8: fontforge

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

* fontforge: command injection via crafted filenames (CVE-2024-25081) * fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01604 bdu:2024-01604 2026-10-07T19:06:32.903004+00:00 bdu:2024-01604 https://cve.radiocsirt.org/vuln/euvd-2026-259415 EUVD-2026-259415 2026-10-07T19:06:32.903022+00:00 EUVD-2026-259415 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25081 fkie_cve-2024-25081 2026-10-07T19:06:32.903033+00:00

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

 https://cve.radiocsirt.org/vuln/ghsa-rjx3-xwwm-jhj5 GHSA-rjx3-xwwm-jhj5 2026-10-07T19:06:32.903055+00:00

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

 https://cve.radiocsirt.org/vuln/gsd-2024-25081 gsd-2024-25081 2026-10-07T19:06:32.903068+00:00 gsd-2024-25081 https://cve.radiocsirt.org/vuln/oesa-2024-1228 OESA-2024-1228 — fontforge security update 2026-10-07T19:06:32.903078+00:00

Affected: openEuler:20.03-LTS-SP1: fontforge, openEuler:20.03-LTS-SP4: fontforge, openEuler:22.03-LTS: fontforge, openEuler:22.03-LTS-SP1: fontforge, openEuler:22.03-LTS-SP2: fontforge, openEuler:22.03-LTS-SP3: fontforge

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Security Fix(es): Splinefont in FontForge through 20230101 allows command injection via crafted filenames.(CVE-2024-25081) Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.(CVE-2024-25082)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13755-1 openSUSE-SU-2024:13755-1 — fontforge-20230101-4.1 on GA media 2026-10-07T19:06:32.903108+00:00

fontforge-20230101-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:2566 RHSA-2026:2566 — Red Hat Security Advisory: fontforge security update 2026-10-07T19:06:32.903125+00:00

fontforge: command injection via crafted filenames fontforge: command injection via crafted archives or compressed files fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing

 https://cve.radiocsirt.org/vuln/suse-su-2024:0863-1 SUSE-SU-2024:0863-1 — Security update for fontforge 2026-10-07T19:06:32.903146+00:00

Security update for fontforge

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-25081 UBUNTU-CVE-2024-25081 2026-10-07T19:06:32.903159+00:00

Affected: Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1512 WID-SEC-W-2024-1512 — Red Hat Enterprise Linux (FontForge): Mehrere Schwachstellen 2026-10-07T19:06:32.903179+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente FontForge ausnutzen, um Informationen offenzulegen und Daten zu manipulieren.