Threats Tagged 'cve-2025-15270'

Multiple remote code execution vulnerabilities have been identified in FontForge, a font editor supporting various font formats. These include heap-based buffer overflow and use-after-free issues in BMP and SFD file parsing. The vulnerabilities affect Red Hat Enterprise Linux 8 and related packages. Red Hat has issued a security advisory with updated packages to address these issues. No known exploits are reported in the wild at this time.

A security vulnerability (CVE-2025-15270) exists in FontForge, a font editor used in Red Hat Enterprise Linux 10. 0 Extended Update Support. The flaw allows remote code execution through the parsing of malicious SFD font files. Red Hat has issued an important security update to address this issue in affected versions of FontForge. The vulnerability is categorized under CWE-129 and is rated with high severity by the source data. No known exploits are reported in the wild. Users of affected Red Hat CodeReady Linux Builder products should apply the provided update to mitigate the risk.