Skip to content
Fencer Intel
high 8.8

CVE-2020-25690 json

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.

published 5y ago modified 4mo ago also EUVD-2020-18351

cvss
8.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.3%
EPSS 1.3% chance of exploitation in 30 days, percentile 71%
public exploits
0
none known

Summary

An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Patch / fix

  • fontforge fontforge 20200314
  • fontforge RHEL 8 20170731-15.el8

red hat advisories RHSA-2020:4844

  • fontforge SLE Software Development Kit 12 SP5 20170731-11.14.1

suse advisories SUSE-SU-2020:3628-1

  • fontforge openSUSE Leap 15.1 20170731-lp151.4.6.1

opensuse advisories openSUSE-SU-2020:2111-1

  • fontforge AlmaLinux 8 20170731-15.el8

almalinux advisories ALSA-2020:4844

Is CVE-2020-25690 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-25690 updated cvss 8.8

fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport

  • Red Hat CodeReady Linux Builder (v. 8) fontforge 20170731-15.el8
    fixed: vendor fix RHSA-2020:4844
  • Red Hat Enterprise Linux 6 fontforge Red Hat Enterprise Linux 7 fontforge
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.34% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

  • n/a fontforge

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.