CVE-2024-25082

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Fontforge, Linuxmint, Red Hat, Red Os

Fontforge

≤ 20230101

Fix

Available

CVSS 3.1

6.5 MEDIUM

EPSS

1.9% (78th percentile)

Weakness

CWE-77

NVD status

Modified

Published

2024-02-26