FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade fontforge | Aug 29, 2017 | Jul 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 14, 2017 |
| Suse | — | Upgrade fontforge | Aug 29, 2019 | Jul 23, 2017 |
| Ubuntu | — | Upgrade fontforgeUpgrade fontforge-common | Sep 4, 2017 | Jul 23, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub