https://bugzilla.redhat.com/show_bug.cgi?id=1788493
Bug ID: 1788493 Summary: CVE-2020-5496 fontforge: heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: mrehak@redhat.com CC: eng-i18n-bugs@redhat.com, fonts-bugs@lists.fedoraproject.org, kevin@scrye.com, paul@frixxon.co.uk, pnemade@redhat.com Target Milestone: --- Classification: Other
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
Upstream Issue:
https://github.com/fontforge/fontforge/issues/4085