https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 07:58:38 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:4844 <p><strong>Affected:</strong> AlmaLinux:8: fontforge</p> <p>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.</p> <p>Security Fix(es):</p> <p>* fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: fontforge</p> <p>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.</p> <p>Security Fix(es):</p> <p>* fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:4844 https://cve.radiocsirt.org/vuln/cnvd-2021-19384 cnvd-2021-19384 https://cve.radiocsirt.org/vuln/cnvd-2021-19384 https://cve.radiocsirt.org/vuln/euvd-2026-45722 EUVD-2026-45722 https://cve.radiocsirt.org/vuln/euvd-2026-45722 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25690 <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25690 https://cve.radiocsirt.org/vuln/ghsa-8m73-qxc4-m26m <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-8m73-qxc4-m26m https://cve.radiocsirt.org/vuln/gsd-2020-25690 gsd-2020-25690 https://cve.radiocsirt.org/vuln/gsd-2020-25690 https://cve.radiocsirt.org/vuln/oesa-2021-1104 <p><strong>Affected:</strong> openEuler:20.03-LTS: fontforge</p> <p>Mozilla fontforge is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-25690)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: fontforge</p> <p>Mozilla fontforge is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-25690)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1104 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2111-1 <p>Security update for fontforge</p> <p>Security update for fontforge</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2111-1 https://cve.radiocsirt.org/vuln/suse-su-2020:3628-1 <p>Security update for fontforge</p> <p>Security update for fontforge</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3628-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25690 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge, Ubuntu:24.04:LTS: fontforge, Ubuntu:25.10: fontforge, Ubuntu:26.10: fontforge, Ubuntu:26.04:LTS: fontforge</p> <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge, Ubuntu:24.04:LTS: fontforge, Ubuntu:25.10: fontforge, Ubuntu:26.10: fontforge, Ubuntu:26.04:LTS: fontforge</p> <p>An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25690