CVE-2020-5395 Use after free in n/a

High 8.8 Published 3 Jan 2020 Updated 4 Aug 2024

A use-after-free vulnerability in FontForge allows attackers to execute arbitrary code or cause a denial of service via crafted font files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2020-5395?

CVE-2020-5395 is a high-severity use after free vulnerability in Fedoraproject Fedora, published on 3 Jan 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

Weakness: CWE-416

Which versions are affected by CVE-2020-5395?

It affects 3 products.

Linux distribution packages (16)

`fontforge` Red Hat:enterprise_linux:7::client	All versions	`0:20120731b-13.el7`
`fontforge-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:20120731b-13.el7`
`fontforge-devel` Red Hat:enterprise_linux:7::client	All versions	`0:20120731b-13.el7`
`fontforge` Red Hat:enterprise_linux:7::computenode	All versions	`0:20120731b-13.el7`
`fontforge-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:20120731b-13.el7`
`fontforge-devel` Red Hat:enterprise_linux:7::computenode	All versions	`0:20120731b-13.el7`
`fontforge` Red Hat:enterprise_linux:7::server	All versions	`0:20120731b-13.el7`
`fontforge-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:20120731b-13.el7`
`fontforge-devel` Red Hat:enterprise_linux:7::server	All versions	`0:20120731b-13.el7`
`fontforge` Red Hat:enterprise_linux:7::workstation	All versions	`0:20120731b-13.el7`
`fontforge-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:20120731b-13.el7`
`fontforge-devel` Red Hat:enterprise_linux:7::workstation	All versions	`0:20120731b-13.el7`
`fontforge` Red Hat:enterprise_linux:8::crb	All versions	`0:20170731-14.el8`
`fontforge-debuginfo` Red Hat:enterprise_linux:8::crb	All versions	`0:20170731-14.el8`
`fontforge-debugsource` Red Hat:enterprise_linux:8::crb	All versions	`0:20170731-14.el8`
`fontforge` openSUSE:Tumbleweed	All versions	`20201107-1.6`

Products include Fedoraproject Fedora, Fontforge Fontforge, Opensuse Leap.

How do I fix CVE-2020-5395?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2020-5395 being exploited?

There is no known exploitation of CVE-2020-5395 in the wild and no public exploit code.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as DEBIAN-CVE-2020-5395, GHSA-hjq7-xwrq-jpwv, RHSA-2020:1921, RHSA-2020:3966, UBUNTU-CVE-2020-5395, openSUSE-SU-2024:10763-1.