https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T07:58:41.205246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4844 ALSA-2020:4844 — Moderate: fontforge security update 2026-10-21T07:58:41.211718+00:00

Affected: AlmaLinux:8: fontforge

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.

Security Fix(es):

* fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/cnvd-2021-19384 cnvd-2021-19384 2026-10-21T07:58:41.211788+00:00 cnvd-2021-19384 https://cve.radiocsirt.org/vuln/euvd-2026-45722 EUVD-2026-45722 2026-10-21T07:58:41.211805+00:00 EUVD-2026-45722 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25690 fkie_cve-2020-25690 2026-10-21T07:58:41.211818+00:00

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/ghsa-8m73-qxc4-m26m GHSA-8m73-qxc4-m26m 2026-10-21T07:58:41.211839+00:00

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-25690 gsd-2020-25690 2026-10-21T07:58:41.211855+00:00 gsd-2020-25690 https://cve.radiocsirt.org/vuln/oesa-2021-1104 OESA-2021-1104 — fontforge security update 2026-10-21T07:58:41.211866+00:00

Affected: openEuler:20.03-LTS: fontforge

Mozilla fontforge is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-25690)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2111-1 openSUSE-SU-2020:2111-1 — Security update for fontforge 2026-10-21T07:58:41.211887+00:00

Security update for fontforge

 https://cve.radiocsirt.org/vuln/suse-su-2020:3628-1 SUSE-SU-2020:3628-1 — Security update for fontforge 2026-10-21T07:58:41.211903+00:00

Security update for fontforge

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25690 UBUNTU-CVE-2020-25690 2026-10-21T07:58:41.211916+00:00

Affected: Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge, Ubuntu:24.04:LTS: fontforge, Ubuntu:25.10: fontforge, Ubuntu:26.10: fontforge, Ubuntu:26.04:LTS: fontforge

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.