Skip to content
OpenAdvisories
High ELSA-2026-7677 4 CVEs

Important: fontforge security update (Oracle Linux 8)

Published Apr 14, 2026 · Updated Apr 14, 2026

Ecosystem: Oracle Linux

Summary

[20200314-7]
- Resolves: RHEL-138168
CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability
- Resolves: RHEL-138174
CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138190
CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138140
CVE-2025-15269 SFD File Parsing Use-After-Free

[20200314-6]
- Resolves: RHEL-26715 - fontforge: various flaws
(CVE-2024-25081 and CVE-2024-25082)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 fontforge 0:20200314-7.el8_10

Vulnerabilities 4

  • High 8.8
    CVE-2025-15269

    FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability

    FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the …

    FontForge FontForge fontforge fontforge Debian Ubuntu
  • High 8.8
    CVE-2025-15270

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulner…

    FontForge FontForge fontforge fontforge Debian Ubuntu
  • High 8.8
    CVE-2025-15275

    FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability …

    FontForge FontForge fontforge fontforge Debian Ubuntu
  • High 7.8
    CVE-2025-15279

    FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnera…

    FontForge FontForge fontforge fontforge Debian Ubuntu Wolfi