fontforge

Direct Vulnerabilities

Known vulnerabilities in the fontforge package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Improper Validation of Array Index	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Stack-based Buffer Overflow	*
L Deserialization of Untrusted Data	*
L Heap-based Buffer Overflow	*
L Use After Free	*
L Integer Overflow or Wraparound	*
L Heap-based Buffer Overflow	*
L Improper Validation of Array Index	*
L Heap-based Buffer Overflow	*
L Use After Free	*
L CVE-2025-50951	*
L CVE-2025-50949	*
L CVE-2024-25082	<1:20230101~dfsg-1.1~deb12u1
L CVE-2024-25081	<1:20230101~dfsg-1.1~deb12u1
H Out-of-bounds Write	<1:20201107~dfsg-1
H Use After Free	<1:20201107~dfsg-1
L Arbitrary Code Injection	<1:20201107~dfsg-1
H Out-of-bounds Read	<1:20170731~dfsg-1
L Out-of-bounds Read	<1:20190801~dfsg-2
L Out-of-bounds Read	*
H Out-of-bounds Read	<1:20170731~dfsg-1
M Out-of-Bounds	<1:20170731~dfsg-1
H Out-of-bounds Read	<1:20170731~dfsg-1
H Out-of-bounds Read	<1:20170731~dfsg-1
H Out-of-Bounds	<1:20170731~dfsg-1
H Out-of-bounds Read	<1:20170731~dfsg-1
H Out-of-Bounds	<1:20170731~dfsg-1
M Out-of-Bounds	<0.0.20100501-4