FontForge 20161012
Approved changes feed: RSS · Atom
cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:*part: a version: 20161012 update: *
| Vendor | Fontforge (00d02612-638a-5079-a2d6-f8840f7a10a4) |
|---|---|
| Product | Fontforge (1a686faf-0953-50d3-a82a-e24194611d84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fontforge/fontforge |
purl2cpe | 2026-06-01 10:17:02.544295 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-11577 |
vulnerable | 2026-06-08 05:08:38.139015 |
Details available
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Published: 2017-07-23T22:00:00.000Z
Updated: 2024-08-05T18:12:40.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11576 |
vulnerable | 2026-06-08 05:08:38.138744 |
Details available
FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
Published: 2017-07-23T22:00:00.000Z
Updated: 2024-08-05T18:12:40.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11575 |
vulnerable | 2026-06-08 05:08:38.138466 |
Details available
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
Published: 2017-07-23T22:00:00.000Z
Updated: 2024-08-05T18:12:40.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11574 |
vulnerable | 2026-06-08 05:08:38.138186 |
Details available
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Published: 2017-07-23T22:00:00.000Z
Updated: 2024-08-05T18:12:40.680Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11573 |
vulnerable | 2026-06-08 05:08:38.137895 |
Details available
FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
Published: 2017-07-23T22:00:00.000Z
Updated: 2024-09-17T01:46:47.078Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11572 |
vulnerable | 2026-06-08 05:08:38.137633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11571 |
vulnerable | 2026-06-08 05:08:38.137348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11570 |
vulnerable | 2026-06-08 05:08:38.137045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11569 |
vulnerable | 2026-06-08 05:08:38.136748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11568 |
vulnerable | 2026-06-08 05:08:38.136345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.