Known vulnerabilities in FontForge 20190813

Vendor: fontforge.org
Software: FontForge
Version: 20190813
Software CPE: cpe:2.3:a:fontforge.org:fontforge:*:*:*:*:*:*:*:*
Website: https://fontforge.org/en-US/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FontForge version 20190813 FontForge 20190813 is affected by 5 vulnerabilities: 3 high, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117705 - Missing release of memory after effective lifetime
CVE-2025-50951		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
#VU117704 - Missing release of memory after effective lifetime
CVE-2025-50949		 CWE-401 Low
No
No
 20251009 28.10.2025 SB2025102850
SB2025102852
SB2025102853
and 10 more
#VU100255 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25081		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more
#VU100254 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-25082		 CWE-78 High
No
No
 - 12.11.2024 SB2024111277
SB2024111280
SB2024111285
and 8 more
#VU27553 - Memory corruption
CVE-2019-15785		 CWE-119 High
No
No
 20200314 05.05.2020 SB2019082910
SB2020043037