RHSA-2026:8937HighCVSS 8.8

Red Hat Security Advisory: fontforge security update

Published
April 20, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2025-15269 →CVE-2025-15275 →CVE-2025-15279 →

📋 Description

CVE-2025-15269 — fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing CVE-2025-15275 — fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow CVE-2025-15279 — fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing

🎯 Affected products23

  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-0:20120731b-14.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-debuginfo-0:20120731b-14.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • fontforge-devel-0:20120731b-14.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, users should avoid opening untrusted SFD files or visiting malicious web pages. Exercise caution with content from unknown or suspicious sources to prevent exploitation of this vulnerability. Workaround: Users should exercise caution and avoid opening untrusted SFD (Spline Font Database) files with FontForge. If FontForge is not essential for system operation, consider removing the `fontforge` package to eliminate the attack vector. This can be achieved using the system's package manager, for example, `sudo dnf remove fontforge` on Red Hat Enterprise Linux and Fedora systems. Removing this package may impact functionality that relies on font editing capabilities. Workaround: Users are advised to avoid opening untrusted or suspicious BMP files with FontForge to prevent exploitation. If FontForge is not a required application, consider removing the `fontforge` package to eliminate the attack surface. Removing this package may impact functionality that relies on FontForge.

🔗 References (6)