Read the docs
Red Hat Security Advisory

RHSA-2020:4844

fontforge security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2020-15706 CVE-2020-25690 · GHSA-8m73-qxc4-m26m

Memory corruption in fontforge

Priority MEDIUM 41

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01343 Published 2021-02-23 Fixed CWE-119