Skip to content
OpenAdvisories
High ELSA-2026-6628 1 CVE

Important: fontforge security update (Oracle Linux 9)

Published Apr 6, 2026 · Updated Apr 6, 2026

Ecosystem: Oracle Linux

Summary

[20201107-8]
- Resolves: RHEL-138245
CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 fontforge 0:20201107-8.el9_7

Vulnerabilities 1

  • High 8.8
    CVE-2025-15270

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulner…

    FontForge FontForge fontforge fontforge Debian Ubuntu