CVE-2020-25690 Memory corruption in fontforge
An out-of-bounds write in FontForge allows attackers to execute arbitrary code or crash the application via malicious SFD files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-25690?
CVE-2020-25690 is a high-severity memory corruption vulnerability in fontforge, published on 23 Feb 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Weakness: CWE-119
Which versions are affected by CVE-2020-25690?
It affects 1 product.
Linux distribution packages (3)
fontforge Red Hat:enterprise_linux:8::crb | All versions | 0:20170731-15.el8 |
fontforge-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:20170731-15.el8 |
fontforge-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:20170731-15.el8 |
Products include Fontforge Fontforge.
How do I fix CVE-2020-25690?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-25690 being exploited?
There is no known exploitation of CVE-2020-25690 in the wild and no public exploit code.
Other vulnerabilities in fontforge
- CVE-2019-15785 Memory corruption in n/a
- CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
- CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
- CVE-2025-15272 FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Sources
Also known as GHSA-8m73-qxc4-m26m, MGASA-2020-0405, OESA-2021-1104, RHSA-2020:4844, UBUNTU-CVE-2020-25690.