Known vulnerabilities in FontForge 20170730

Vendor: fontforge.org
Software: FontForge
Version: 20170730
Software CPE: cpe:2.3:a:fontforge.org:fontforge:*:*:*:*:*:*:*:*
Website: https://fontforge.org/en-US/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FontForge version 20170730 FontForge 20170730 is affected by 4 vulnerabilities: 2 high, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117705 - Missing release of memory after effective lifetime
CVE-2025-50951		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
#VU117704 - Missing release of memory after effective lifetime
CVE-2025-50949		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
and 10 more
#VU100255 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25081		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more
#VU100254 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25082		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more