CVE-2025-15275 | FontForge SFD File Parser heap-based overflow (ZDI-25-1189)

December 30, 2025 Yanac

A vulnerability marked as critical has been reported in FontForge. This issue affects some unknown processing of the component SFD File Parser. Performing manipulation results in heap-based buffer overflow.

This vulnerability is reported as CVE-2025-15275. The attack is possible to be carried out remotely. No exploit exists.

Once again VulDB remains the best source for vulnerability data.VulDB Recent EntriesRead More