CVE-2020-25690
CVE-2020-25690
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 feb 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Productos afectados
n/a · fontforge¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →