PatchTheCVEfontforge vulnerabilities and fixes
Recent CVEs affecting fontforge, with upgrade or downgrade steps. 1 tracked.
fontforge has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-10-23. Highest priority: CVE-2025-50949 (score 27/100).
- CVE-2025-50949 MEDIUM 6.5 DOWNGRADE FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
FAQ
How do I fix fontforge vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fontforge being exploited right now?
None of the tracked fontforge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fontforge CVE should I patch first?
CVE-2025-50949 currently ranks highest (27/100): FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8..