CVE-2025-15277
Description
A flaw was found in FontForge. This vulnerability, a heap-based buffer overflow, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious SGI (Silicon Graphics Image) file, which triggers improper data length validation during scanline parsing, leading to memory corruption.
Statement
This vulnerability is rated Important for Red Hat products. Exploitation requires user interaction, specifically opening a specially crafted SGI file in FontForge. This impacts systems where FontForge is installed and used to process untrusted image files, such as in desktop environments.
Mitigation
Avoid opening untrusted SGI (Silicon Graphics Image) files with FontForge. If FontForge is not essential for system operation, consider removing the package to eliminate the attack surface.
To remove FontForge:
For Red Hat Enterprise Linux 7 and 8:
`sudo yum remove fontforge`
For Red Hat Enterprise Linux 9 and 10, and Fedora:
`sudo dnf remove fontforge`
Removing FontForge may affect other applications that depend on its functionality. A system restart may be required to ensure all related processes are terminated.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.8 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cve.org: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
