CVE-2024-25082

2024-02-2600:00:00

ubuntu.com

splinefont

command injection

craft archives

fontforge

unix

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

Splinefont in FontForge through 20230101 allows command injection via
crafted archives or compressed files.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfontforge< 1:20170731~dfsg-1ubuntu0.1~esm1UNKNOWN
ubuntu20.04noarchfontforge< 1:20190801~dfsg-4ubuntu0.1UNKNOWN
ubuntu22.04noarchfontforge< 1:20201107~dfsg-4+deb11u1build0.22.04.1UNKNOWN
ubuntu23.10noarchfontforge< 1:20230101~dfsg-1ubuntu0.1UNKNOWN
ubuntu16.04noarchfontforge< 20120731.b-7.1ubuntu0.1+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	fontforge	< 1:20170731~dfsg-1ubuntu0.1~esm1	UNKNOWN
ubuntu	20.04	noarch	fontforge	< 1:20190801~dfsg-4ubuntu0.1	UNKNOWN
ubuntu	22.04	noarch	fontforge	< 1:20201107~dfsg-4+deb11u1build0.22.04.1	UNKNOWN
ubuntu	23.10	noarch	fontforge	< 1:20230101~dfsg-1ubuntu0.1	UNKNOWN
ubuntu	16.04	noarch	fontforge	< 20120731.b-7.1ubuntu0.1+esm1	UNKNOWN