#1118749 fontforge: CVE-2025-50951

Package:
src:fontforge
Source:
src:fontforge
Submitter:
Salvatore Bonaccorso
Date:
2026-08-09 21:51:02 UTC
Severity:
normal
Tags:
#1118749#5
Date:
2025-10-24 20:28:11 UTC
From:
To:
Hi,

The following vulnerability was published for fontforge.

CVE-2025-50951[0]:
| FontForge v20230101 was discovered to contain a memory leak via the
| utf7toutf8_copy function at /fontforge/sfd.c.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-50951
https://www.cve.org/CVERecord?id=CVE-2025-50951
[1] https://github.com/fontforge/fontforge/pull/5495
[2] https://github.com/fontforge/fontforge/commit/dcb6efb85030c4bee2f18c6e46c20561d1c77a2b

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore
#1118749#16
Date:
2026-08-09 21:49:56 UTC
From:
To: