https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:20:35 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:2039 <p><strong>Affected:</strong> AlmaLinux:9: fontforge</p> <p>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.</p> <p>Security Fix(es):</p> <p>* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279) * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269) * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: fontforge</p> <p>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.</p> <p>Security Fix(es):</p> <p>* fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279) * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269) * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:2039 https://cve.radiocsirt.org/vuln/euvd-2026-264708 EUVD-2026-264708 https://cve.radiocsirt.org/vuln/euvd-2026-264708 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15269 <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-15269 https://cve.radiocsirt.org/vuln/ghsa-8j84-3r78-7j5x <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> https://cve.radiocsirt.org/vuln/ghsa-8j84-3r78-7j5x https://cve.radiocsirt.org/vuln/opensuse-su-2026:10122-1 <p>fontforge-20251009-4.1 on GA media</p> <p>fontforge-20251009-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10122-1 https://cve.radiocsirt.org/vuln/rhsa-2026:2232 <p>fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing</p> <p>fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2026:2232 https://cve.radiocsirt.org/vuln/suse-su-2026:20435-1 <p>Security update for fontforge</p> <p>Security update for fontforge</p> https://cve.radiocsirt.org/vuln/suse-su-2026:20435-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-15269 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge, Ubuntu:24.04:LTS: fontforge, Ubuntu:25.10: fontforge, Ubuntu:26.04:LTS: fontforge</p> <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: fontforge, Ubuntu:Pro:18.04:LTS: fontforge, Ubuntu:20.04:LTS: fontforge, Ubuntu:22.04:LTS: fontforge, Ubuntu:24.04:LTS: fontforge, Ubuntu:25.10: fontforge, Ubuntu:26.04:LTS: fontforge</p> <p>FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-15269 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0319 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0319