CVE-2025-15274

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28544.

Published Feb 26, 2026

https://www.zerodayinitiative.com/advisories/ZDI-25-1189/

CVSS ScoreHigh

8.8

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-15274

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28544.

Published Feb 26, 2026

https://www.zerodayinitiative.com/advisories/ZDI-25-1189/

CVSS ScoreHigh

8.8


maven	com.viliussutkus89.licenseOnly/FontForge	20170731
rpm	fontforge	20061025-3.el4
rpm	fontforge	20080828-1.1.el5
rpm	fontforge	20090622-2.1.el6
rpm	fontforge	20090622-3.1.el6
rpm	fontforge	20120731b-12.el7
rpm	fontforge	20120731b-13.el7
rpm	fontforge	20170731-13.el8
rpm	fontforge	20170731-14.el8
rpm	fontforge	20170731-15.el8
rpm	fontforge	20170731-8.el8
rpm	fontforge	20200314-5.el8
rpm	fontforge	20201107-5.el9
rpm	fontforge	20201107-6.el9
rpm	fontforge	20230101-12.el10
rpm	fontforge	20230101-13.el10
rpm	fontforge	20230101-14.el10_1

Ecosystem	Package	Version


maven	com.viliussutkus89.licenseOnly/FontForge	20170731
rpm	fontforge	20061025-3.el4
rpm	fontforge	20080828-1.1.el5
rpm	fontforge	20090622-2.1.el6
rpm	fontforge	20090622-3.1.el6
rpm	fontforge	20120731b-12.el7
rpm	fontforge	20120731b-13.el7
rpm	fontforge	20170731-13.el8
rpm	fontforge	20170731-14.el8
rpm	fontforge	20170731-15.el8
rpm	fontforge	20170731-8.el8
rpm	fontforge	20200314-5.el8
rpm	fontforge	20201107-5.el9
rpm	fontforge	20201107-6.el9
rpm	fontforge	20230101-12.el10
rpm	fontforge	20230101-13.el10
rpm	fontforge	20230101-14.el10_1

Find vulnerabilities. Fix fast with AI.

CVE-2025-15274

CVE-2025-15274