Gnome-font-viewer 3.34.0
Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:gnome-font-viewer:3.34.0:*:*:*:*:*:*:*
part: a version: 3.34.0 update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Gnome Font Viewer (e7349193-9556-590b-b78d-6a9a83d8fdd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739315 |
pkg:deb/ubuntu/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739316 |
pkg:github/gnome/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739317 |
pkg:rpm/centos/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739318 |
pkg:rpm/fedora/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739320 |
pkg:rpm/opensuse/gnome-font-viewer |
purl2cpe | 2026-06-01 10:17:25.739321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37011 |
vulnerable | 2026-06-08 05:25:50.002596 |
Gnome Fonts Viewer 3.34.0 Heap Corruption
HIGH (7.5)
Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc() calls and potentially crash the gnome-font-viewer process.
Published: 2026-01-29T14:28:31.241Z
Updated: 2026-05-26T11:51:40.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19308 |
vulnerable | 2026-06-08 05:13:22.105764 |
Details available
In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).
Published: 2019-11-27T14:37:38.000Z
Updated: 2024-08-05T02:16:46.998Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.