Fontforge: >> Fontforge >> 20161012 Security Vulnerabilities
FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score
7.8
EPSS Score
0.004
Published
2017-07-23
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score
7.8
EPSS Score
0.007
Published
2017-07-23
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVSS Score
7.8
EPSS Score
0.004
Published
2017-07-23
FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVSS Score
5.5
EPSS Score
0.003
Published
2017-07-23
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score
7.8
EPSS Score
0.004
Published
2017-07-23
Page 2