CVE-2020-5496

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlThird Party Advisory
https://github.com/fontforge/fontforge/issues/4085Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
https://security.gentoo.org/glsa/202004-14Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlThird Party Advisory
https://github.com/fontforge/fontforge/issues/4085Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
https://security.gentoo.org/glsa/202004-14Third Party Advisory

Timeline

Published: Jan 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-54976.1The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsa CVE-2020-54999.8Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the sam CVE-2020-55014.3phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.CVE-2020-55026.5phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.CVE-2020-55048.8In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in CVE-2020-55059.8Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"applic CVE-2020-55097.2PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image.CVE-2020-55109.8PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.CVE-2020-55118.8PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.CVE-2020-55126.8Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.CVE-2020-55136.8Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.CVE-2020-55149.1Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.