CVE-2025-50951

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@mitre.org

Published

2025-10-23

Last modified

2025-10-24

Weaknesses

CWE-401

Affected products

• Fontforge (Fontforge)

References

• https://github.com/fontforge/fontforge/pull/5495