Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-fontforge | Jul 4, 2024 | Feb 26, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-fontforgeamazon-linux-ami-2-upgrade-fontforge-debuginfoamazon-linux-ami-2-upgrade-fontforge-devel | Mar 19, 2024 | Feb 26, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-fontforgeamazon-linux-2023-upgrade-fontforge-debuginfoamazon-linux-2023-upgrade-fontforge-debugsourceamazon-linux-2023-upgrade-fontforge-develamazon-linux-2023-upgrade-fontforge-doc | Feb 17, 2025 | Feb 26, 2024 | |
| Debian | debian-upgrade-fontforge | Mar 11, 2024 | Feb 26, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-media-gfx-fontforge | Aug 7, 2025 | Aug 6, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-fontforge | Nov 21, 2024 | Feb 26, 2024 |
| Redhat_linux | redhat-upgrade-fontforgeredhat-upgrade-fontforge-debuginforedhat-upgrade-fontforge-debugsource | Jul 3, 2024 | Feb 26, 2024 | |
| Rocky_linux | rocky-upgrade-fontforgerocky-upgrade-fontforge-debuginforocky-upgrade-fontforge-debugsource | Mar 18, 2025 | Feb 26, 2024 | |
| Suse | — | suse-upgrade-fontforgesuse-upgrade-fontforge-develsuse-upgrade-fontforge-doc | Mar 14, 2024 | Feb 26, 2024 |
| Ubuntu | ubuntu-pro-upgrade-fontforgeubuntu-pro-upgrade-python-fontforgeubuntu-upgrade-fontforgeubuntu-upgrade-python3-fontforge | Jul 3, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub