Read the docs
Red Hat Security Advisory

RHSA-2026:7677

fontforge security update

Released 2026-04-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2025-13950 CVE-2025-15275 · GHSA-6465-93fg-6pfr

Heap-based buffer overflow in FontForge

Priority MEDIUM 41

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00609 Published 2025-12-31 Partial fix CWE-122
TI-2025-13945 CVE-2025-15270 · GHSA-hp8x-4h95-9799

Improper array index validation in FontForge

Priority MEDIUM 41

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0061 Published 2025-12-31 Partial fix CWE-129
TI-2025-13944 CVE-2025-15269 · GHSA-8j84-3r78-7j5x

Use after free in FontForge

Priority MEDIUM 41

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00533 Published 2025-12-31 Partial fix CWE-416
TI-2025-13954 CVE-2025-15279 · GHSA-cgxg-jvf2-h7v5

Heap-based buffer overflow in FontForge

Priority LOW 36

FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2025-12-31 Partial fix CWE-122