Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fontforge | Jul 4, 2024 | Feb 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade fontforge-debuginfoUpgrade fontforge-develUpgrade fontforge | Mar 19, 2024 | Feb 26, 2024 |
| Amazon_linux_2023 | — | Upgrade fontforge-docUpgrade fontforge-debuginfoUpgrade fontforge-debugsourceUpgrade fontforge-develUpgrade fontforge | Feb 17, 2025 | Feb 26, 2024 |
| Debian | — | Upgrade fontforge | Mar 11, 2024 | Feb 26, 2024 |
| Gentoo Linux | — | Upgrade media-gfx/fontforge. | Aug 7, 2025 | Aug 6, 2025 |
| Oracle_linux | — | Upgrade fontforge | Nov 21, 2024 | Feb 26, 2024 |
| Redhat_linux | — | Upgrade fontforge-debuginfoNo solution existsUpgrade fontforge-debugsourceUpgrade fontforge | Jul 3, 2024 | Feb 26, 2024 |
| Rocky_linux | — | Upgrade fontforge-debuginfoUpgrade fontforge-debugsourceUpgrade fontforge | Mar 18, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade fontforge-develUpgrade fontforge-docUpgrade fontforge | Mar 14, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade python3-fontforgeUpgrade fontforgeUpgrade python-fontforge (Ubuntu Pro)Upgrade fontforge (Ubuntu Pro) | Jul 3, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub