FontForge kayıtları

fontforge üreticisine ait 31 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 10
Düzeltme kaydı olan: %64,5
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

31 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2019-15785İstismar yok	FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.fontforge · fontforge · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%2,7	29 Ağu 2019
36İzleyin	CVE-2020-5395İstismar yok	FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.fontforge · fontforge · CWE-416 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	—	%2,5	3 Oca 2020
36İzleyin	CVE-2020-5496İstismar yok	FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.fontforge · fontforge · CWE-787 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	—	%2,4	3 Oca 2020
36İzleyin	CVE-2017-17521İstismar yok	uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable,fontforge · fontforge · CWE-74 Kimlik doğrulamasız	Yüksek8,8	—	%1,8	14 Ara 2017
35İzleyin	CVE-2020-25690İstismar yok	An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.fontforge · fontforge · CWE-119 pre-auth RCE Bellek hatası	Yüksek8,8	—	%1,3	23 Şub 2021
35İzleyin	CVE-2025-15280İstismar yok	FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-416 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15270İstismar yok	FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-129 pre-auth RCE	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15271İstismar yok	FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-129 pre-auth RCE	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15274İstismar yok	FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-122 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15272İstismar yok	FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-122 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15273İstismar yok	FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-121 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15275İstismar yok	FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-122 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,6	31 Ara 2025
35İzleyin	CVE-2025-15269İstismar yok	FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-416 pre-auth RCE Bellek hatası	Yüksek8,8	—	%0,5	31 Ara 2025
31İzleyin	CVE-2017-11571İstismar yok	FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a craftedfontforge · fontforge · CWE-119 Bellek hatası	Yüksek7,8	—	%1,4	23 Tem 2017
31İzleyin	CVE-2017-11569İstismar yok	FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via afontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,4	23 Tem 2017
31İzleyin	CVE-2017-11574İstismar yok	FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a craftedfontforge · fontforge · CWE-119 Bellek hatası	Yüksek7,8	—	%1,4	23 Tem 2017
31İzleyin	CVE-2017-11568İstismar yok	FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution viafontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,3	23 Tem 2017
31İzleyin	CVE-2017-11570İstismar yok	FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.fontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,3	23 Tem 2017
31İzleyin	CVE-2017-11572İstismar yok	FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a cfontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,2	23 Tem 2017
31İzleyin	CVE-2017-11575İstismar yok	FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, relafontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,2	23 Tem 2017
31İzleyin	CVE-2017-11577İstismar yok	FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.fontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,2	23 Tem 2017
31İzleyin	CVE-2017-11573İstismar yok	FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a cfontforge · fontforge · CWE-125 Bellek hatası	Yüksek7,8	—	%1,2	23 Tem 2017
31İzleyin	CVE-2025-15276Kavram kanıtı	FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-502 RCE Deserializasyon	Yüksek7,8	—	%0,4	31 Ara 2025
31İzleyin	CVE-2025-15278İstismar yok	FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-190 RCE Bellek hatası	Yüksek7,8	—	%0,3	31 Ara 2025
31İzleyin	CVE-2025-15277İstismar yok	FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityfontforge · fontforge · CWE-122 RCE Bellek hatası	Yüksek7,8	—	%0,3	31 Ara 2025

CVE-2019-15785
40Planlayın
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
KritikCVSS 9,8İstismar yokEPSS %3
- Kimlik doğrulamasız
- Bellek hatası
fontforge · fontforge29 Ağu 2019
CVE-2020-5395
36İzleyin
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Bellek hatası
fontforge · fontforge3 Oca 2020
CVE-2020-5496
36İzleyin
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Bellek hatası
fontforge · fontforge3 Oca 2020
CVE-2017-17521
36İzleyin
uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable,
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
fontforge · fontforge14 Ara 2017
CVE-2020-25690
35İzleyin
An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge23 Şub 2021
CVE-2025-15280
35İzleyin
FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15270
35İzleyin
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
fontforge · fontforge31 Ara 2025
CVE-2025-15271
35İzleyin
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
fontforge · fontforge31 Ara 2025
CVE-2025-15274
35İzleyin
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15272
35İzleyin
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15273
35İzleyin
FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15275
35İzleyin
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15269
35İzleyin
FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2017-11571
31İzleyin
FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11569
31İzleyin
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11574
31İzleyin
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11568
31İzleyin
FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11570
31İzleyin
FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11572
31İzleyin
FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a c
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11575
31İzleyin
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, rela
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11577
31İzleyin
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2017-11573
31İzleyin
FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a c
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
fontforge · fontforge23 Tem 2017
CVE-2025-15276
31İzleyin
FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
YüksekCVSS 7,8Kavram kanıtıEPSS %0
- RCE
- Deserializasyon
fontforge · fontforge31 Ara 2025
CVE-2025-15278
31İzleyin
FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025
CVE-2025-15277
31İzleyin
FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
fontforge · fontforge31 Ara 2025