RHSA-2026:2213HighCVSS 8.8

Red Hat Security Advisory: fontforge security update

Published
February 9, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2025-15269 →CVE-2025-15275 →CVE-2025-15279 →

📋 Description

CVE-2025-15269 — fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing CVE-2025-15275 — fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow CVE-2025-15279 — fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing

🎯 Affected products17

  • Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.src as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-0:20201107-7.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debuginfo-0:20201107-7.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debuginfo-0:20201107-7.el9_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debuginfo-0:20201107-7.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debuginfo-0:20201107-7.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debuginfo-0:20201107-7.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debugsource-0:20201107-7.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debugsource-0:20201107-7.el9_6.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debugsource-0:20201107-7.el9_6.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debugsource-0:20201107-7.el9_6.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • fontforge-debugsource-0:20201107-7.el9_6.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, users should avoid opening untrusted SFD files or visiting malicious web pages. Exercise caution with content from unknown or suspicious sources to prevent exploitation of this vulnerability. Workaround: Users should exercise caution and avoid opening untrusted SFD (Spline Font Database) files with FontForge. If FontForge is not essential for system operation, consider removing the `fontforge` package to eliminate the attack vector. This can be achieved using the system's package manager, for example, `sudo dnf remove fontforge` on Red Hat Enterprise Linux and Fedora systems. Removing this package may impact functionality that relies on font editing capabilities. Workaround: Users are advised to avoid opening untrusted or suspicious BMP files with FontForge to prevent exploitation. If FontForge is not a required application, consider removing the `fontforge` package to eliminate the attack surface. Removing this package may impact functionality that relies on FontForge.

🔗 References (6)