Known vulnerabilities in FontForge 20161012

Vendor: fontforge.org
Software: FontForge
Version: 20161012
Software CPE: cpe:2.3:a:fontforge.org:fontforge:*:*:*:*:*:*:*:*
Website: https://fontforge.org/en-US/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FontForge version 20161012 FontForge 20161012 is affected by 6 vulnerabilities: 4 high, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117705 - Missing release of memory after effective lifetime
CVE-2025-50951		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
#VU117704 - Missing release of memory after effective lifetime
CVE-2025-50949		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
and 10 more
#VU100255 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25081		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more
#VU100254 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25082		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more
#VU38651 - Out-of-bounds read
CVE-2017-11570		 CWE-125 High
No
No
 - 24.07.2017 SB2017072416
#VU38652 - Out-of-bounds read
CVE-2017-11573		 CWE-125 High
No
No
 - 24.07.2017 SB2017072416