FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.html | Third Party Advisory |
https://github.com/fontforge/fontforge/issues/4085 | Exploit Issue Tracking Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html | |
https://security.gentoo.org/glsa/202004-14 | Third Party Advisory |
Configurations
History
08 Mar 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
24 Jan 2023, 01:53
Type | Values Removed | Values Added |
---|---|---|
First Time |
Opensuse
Opensuse leap |
|
CPE | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.html - Third Party Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/202004-14 - Third Party Advisory | |
References | (MISC) https://github.com/fontforge/fontforge/issues/4085 - Exploit, Issue Tracking, Third Party Advisory |
Information
Published : 2020-01-03 22:15
Updated : 2024-03-08 01:15
NVD link : CVE-2020-5496
Mitre link : CVE-2020-5496
CVE.ORG link : CVE-2020-5496
JSON object : View
Products Affected
opensuse
- leap
fontforge
- fontforge
CWE
CWE-787
Out-of-bounds Write