CVE-2020-5395

Debian Bug report logs - #948231 fontforge: CVE-2020-5395 CVE-2020-5496 Package: fontforge; Maintainer for fontforge is Debian Fonts Task Force <pkg-fonts-devel@listsaliothdebianorg>; Source for fontforge is src:fontforge (PTS, buildd, popcon) Reported by: Markus Koschany <apo@debianorg> Date: Sun, 5 Jan 2020 17 ...

Synopsis Moderate: fontforge security update Type/Severity Security Advisory: Moderate Topic An update for fontforge is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score ...

Synopsis Moderate: fontforge security update Type/Severity Security Advisory: Moderate Topic An update for fontforge is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score ...

An out-of-bounds write was discovered in fontforge while parsing SFD files containing very large LayerCount tokens The flaw allows an attacker to overwrite data before a buffer allocated on the heap, thus causing the application to crash or execute arbitrary code (CVE-2020-5395) ...