Read the docs
Red Hat Security Advisory

RHSA-2026:6635

fontforge security update

Released 2026-04-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2025-13945 CVE-2025-15270 · GHSA-hp8x-4h95-9799

Improper array index validation in FontForge

Priority MEDIUM 41

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0061 Published 2025-12-31 Partial fix CWE-129