Debian Fontforge vulnerabilities
13 known vulnerabilities affecting debian/fontforge.
Total CVEs
13
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH9MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2010-4259P3MEDIUMCVSS 6.8PoCfixed in fontforge 0.0.20100501-4 (bookworm)2010
CVE-2010-4259 [MEDIUM] CVE-2010-4259: fontforge - Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cau...
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.
Scope: local
bookworm: resolved (fixed in 0.0.20100501-4)
bullseye: resolved (fixed in 0.0.20100501-4)
forky: resolved (fixed in 0.0.20100501-4)
sid: res
debian
CVE-2024-25082P3MEDIUMCVSS 6.5fixed in fontforge 1:20230101~dfsg-1.1~deb12u1 (bookworm)2024
CVE-2024-25082 [MEDIUM] CVE-2024-25082: fontforge - Splinefont in FontForge through 20230101 allows command injection via crafted ar...
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
Scope: local
bookworm: resolved (fixed in 1:20230101~dfsg-1.1~deb12u1)
bullseye: resolved (fixed in 1:20201107~dfsg-4+deb11u1)
forky: resolved (fixed in 1:20230101~dfsg-1.1)
sid: resolved (fixed in 1:20230101~dfsg-1.1)
trixie: resolved (fixed in 1:20230101
debian
CVE-2020-5395P3HIGHCVSS 8.8fixed in fontforge 1:20201107~dfsg-1 (bookworm)2020
CVE-2020-5395 [HIGH] CVE-2020-5395: fontforge - FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
Scope: local
bookworm: resolved (fixed in 1:20201107~dfsg-1)
bullseye: resolved (fixed in 1:20201107~dfsg-1)
forky: resolved (fixed in 1:20201107~dfsg-1)
sid: resolved (fixed in 1:20201107~dfsg-1)
trixie: resolved (fixed in 1:20201107~dfsg-1)
debian
CVE-2020-5496P3HIGHCVSS 8.8fixed in fontforge 1:20201107~dfsg-1 (bookworm)2020
CVE-2020-5496 [HIGH] CVE-2020-5496: fontforge - FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() ...
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
Scope: local
bookworm: resolved (fixed in 1:20201107~dfsg-1)
bullseye: resolved (fixed in 1:20201107~dfsg-1)
forky: resolved (fixed in 1:20201107~dfsg-1)
sid: resolved (fixed in 1:20201107~dfsg-1)
trixie: resolved (fixed in 1:20201107~dfsg-1)
debian
CVE-2017-11571P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11571 [HIGH] CVE-2017-11571: fontforge - FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (...
FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: resolved (
debian
CVE-2017-11569P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11569 [HIGH] CVE-2017-11569: fontforge - FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopy...
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: re
debian
CVE-2017-11574P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11574 [HIGH] CVE-2017-11574: fontforge - FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (...
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: resolved (
debian
CVE-2017-11568P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11568 [HIGH] CVE-2017-11568: fontforge - FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStrin...
FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie:
debian
CVE-2017-11577P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11577 [HIGH] CVE-2017-11577: fontforge - FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) re...
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: resolved (fixed in 1:201
debian
CVE-2017-11575P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11575 [HIGH] CVE-2017-11575: fontforge - FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) res...
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: re
debian
CVE-2017-11572P4HIGHCVSS 7.8fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11572 [HIGH] CVE-2017-11572: fontforge - FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopd...
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: reso
debian
CVE-2024-25081P4MEDIUMCVSS 4.2fixed in fontforge 1:20230101~dfsg-1.1~deb12u1 (bookworm)2024
CVE-2024-25081 [MEDIUM] CVE-2024-25081: fontforge - Splinefont in FontForge through 20230101 allows command injection via crafted fi...
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
Scope: local
bookworm: resolved (fixed in 1:20230101~dfsg-1.1~deb12u1)
bullseye: resolved (fixed in 1:20201107~dfsg-4+deb11u1)
forky: resolved (fixed in 1:20230101~dfsg-1.1)
sid: resolved (fixed in 1:20230101~dfsg-1.1)
trixie: resolved (fixed in 1:20230101~dfsg-1.1)
debian
CVE-2017-11576P4MEDIUMCVSS 5.5fixed in fontforge 1:20170731~dfsg-1 (bookworm)2017
CVE-2017-11576 [MEDIUM] CVE-2017-11576: fontforge - FontForge 20161012 does not ensure a positive size in a weight vector memcpy cal...
FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
Scope: local
bookworm: resolved (fixed in 1:20170731~dfsg-1)
bullseye: resolved (fixed in 1:20170731~dfsg-1)
forky: resolved (fixed in 1:20170731~dfsg-1)
sid: resolved (fixed in 1:20170731~dfsg-1)
trixie: resol
debian