vulnerability

Oracle Linux: CVE-2024-25081: ELSA-2024-9439: fontforge security update (MODERATE)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:L/AC:H/Au:S/C:P/I:P/A:P)
Published
Feb 26, 2024
Added
Nov 21, 2024
Modified
Dec 3, 2025

Description

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

Solution

oracle-linux-upgrade-fontforge

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today