VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Nov 27, 2019· Updated Jun 17, 2026

CVE-2019-19308

CVE-2019-19308

Description

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GNOME Foundation/gnome-font-viewer2 versions
    cpe:2.3:a:gnome:gnome-font-viewer:3.34.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnome:gnome-font-viewer:3.34.0:*:*:*:*:*:*:*
    • (no CPE)range: <3.34.0
  • gnome/gnome-font-viewerdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.