← All advisories

Unrated severityNVD Advisory· Published Jan 3, 2020· Updated Aug 4, 2024

CVE-2020-5496

CVE-2020-5496

Description

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

FontForge/FontForgedescription
Fontforge/Fontforgellm-fuzzy
Range: = 20190801
osv-coords3 versions
pkg:rpm/opensuse/fontforge&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/fontforge&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/fontforge&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 20170731-lp151.4.3.1+ 2 more
- (no CPE)range: < 20170731-lp151.4.3.1
- (no CPE)range: < 20170731-11.11.1
- (no CPE)range: < 20170731-11.11.1

Patches

Vulnerability mechanics

References

4

lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlmitrevendor-advisory
security.gentoo.org/glsa/202004-14mitrevendor-advisory
lists.debian.org/debian-lts-announce/2024/03/msg00007.htmlmitremailing-list
github.com/fontforge/fontforge/issues/4085mitre

News mentions

0

No linked articles in our index yet.