Skip to content
OpenAdvisories
High RHSA-2026:6635 1 CVE

Red Hat Security Advisory: fontforge security update

Published Apr 6, 2026 · Updated Jul 9, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb fontforge 0:20201107-8.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb fontforge-debuginfo 0:20201107-8.el9_6
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb fontforge-debugsource 0:20201107-8.el9_6

Vulnerabilities 1

  • High 8.8
    CVE-2025-15270

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

    FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulner…

    FontForge FontForge fontforge fontforge Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2426434
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6635.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-15270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-15270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-15270
  • article
    https://www.zerodayinitiative.com/advisories/ZDI-25-1194/