Memory Leak Vulnerability in FontForge Software
CVE-2025-50949

6.5MEDIUM

Key Information:

Vendor

FontForge

Status
FontForge
Vendor
CVE Published:
23 October 2025

What is CVE-2025-50949?

FontForge version 20230101 has been identified to contain a memory leak through the component DlgCreate8. This issue can lead to excessive memory consumption, potentially affecting application performance and stability. Developers and users should be aware of this vulnerability to ensure appropriate mitigation strategies are in place.

References

https://github.com/fontforge/fontforge/pull/5491

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.