← All advisories

Unrated severityNVD Advisory· Published Jan 3, 2020· Updated Aug 4, 2024

CVE-2020-5395

CVE-2020-5395

Description

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

FontForge/FontForgedescription
Fontforge/Fontforgellm-fuzzy
Range: = 20190801
osv-coords5 versions
pkg:rpm/almalinux/fontforge pkg:rpm/opensuse/fontforge&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/fontforge&distro=openSUSE%20Tumbleweed pkg:rpm/suse/fontforge&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/fontforge&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 20170731-15.el8+ 4 more
- (no CPE)range: < 20170731-15.el8
- (no CPE)range: < 20170731-lp151.4.3.1
- (no CPE)range: < 20201107-1.6
- (no CPE)range: < 20170731-11.11.1
- (no CPE)range: < 20170731-11.11.1

Patches

Vulnerability mechanics

References

6

lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlmitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S75EAVF4KPCH3WFBMZADUAU7EAXA7ZQ/mitrevendor-advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MH6PKVQLBKIO7LQPDXB3MKI5I6AMDCN6/mitrevendor-advisory
security.gentoo.org/glsa/202004-14mitrevendor-advisory
lists.debian.org/debian-lts-announce/2024/03/msg00007.htmlmitremailing-list
github.com/fontforge/fontforge/issues/4084mitre

News mentions

0

No linked articles in our index yet.