← Packages Outline and bitmap font editor
/SPECS/fontforge https://fontforge.org/ Build Target Result Last successful version Succeeded at rva23
20251009
2026-10-08 12:40:57 UTC
rva20
20251009
2026-10-08 07:32:01 UTC
x86_64
20251009
2026-10-08 06:50:38 UTC
Build Advisory · 4 Description Changelog PR · 2 Checks Advisory · 4 Query name https://github.com/fontforge/fontforge OSV Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
Summary FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability OSV EPSS model date 2026-11-05 FIRST EPSS probability 0.353% FIRST CVSS_V3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OSV Summary FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability OSV EPSS model date 2026-11-05 FIRST EPSS probability 0.291% FIRST CVSS_V3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OSV Summary FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability OSV EPSS model date 2026-11-05 FIRST EPSS probability 0.296% FIRST CVSS_V3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OSV Summary FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability OSV EPSS model date 2026-11-05 FIRST EPSS probability 0.291% FIRST CVSS_V3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OSV Description FontForge (former PfaEdit) is a font editor for outline and bitmap
fonts. It supports a range of font formats, including PostScript
(ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType
(Type2) and CID-keyed fonts.
Checks Monitor Observation Last checked Checked
2026-11-06 15:12:24 UTC
Checked
2026-11-06 11:25:56 UTC
Checked
2026-11-06 15:13:31 UTC
Checked
2026-11-06 15:09:38 UTC
Not configured
No reliable monitor identity/configuration.
—
Not configured
No reliable monitor identity/configuration.
—
Not configured
No reliable monitor identity/configuration.
—
Checked
Repository query; subpackage and local-patch applicability are not evaluated.
2026-11-06 06:52:37 UTC
Last attempted 2026-11-06 12:01:32 UTC
Not configured
No reliable monitor identity/configuration.
—
