Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-50949

Опубликовано: 23 окт. 2025
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.

A memory leak flaw has been discovered in the Font Forge project. The DlgCreate8 component does not properly free memory and repeated use may exhaust system memory resulting in the host operating system terminating the process.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10fontforgeFix deferred
Red Hat Enterprise Linux 8fontforgeFix deferred
Red Hat Enterprise Linux 9fontforgeFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-772

EPSS

Процентиль: 16%
0.00243
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
10 месяцев назад

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.

CVSS3: 6.5
nvd
10 месяцев назад

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.

CVSS3: 6.5
debian
10 месяцев назад

FontForge v20230101 was discovered to contain a memory leak via the co ...

suse-cvrf
8 месяцев назад

Security update for fontforge

suse-cvrf
8 месяцев назад

Security update for fontforge

EPSS

Процентиль: 16%
0.00243
Низкий

5.3 Medium

CVSS3