Package
py3.13-fontforge
Component
py3.13-fontforge
Latest update
Fixed version
20251009-r6
7.8
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
20251009-r6Impact
Fixed by backporting the upstream commits for this CVE to 20251009: fontforge/fontforge#5720 (7d67700c) and #5723 (720ea950), carried verbatim as os/fontforge/CVE-2025-15279.patch. Those two bound only the 8-bit branch of the BMP RLE decompressor; the 4-bit branch of the same function overflows the same heap buffer and upstream closed that report (fontforge/fontforge#5808) without a fix, so os/fontforge/5808-bmp-rle4-bounds.patch bounds it as well, and the whole reachable overflow in readpixels() is closed. ZDI did not publish a proof of concept for this id, so which depth the original report hit is not known; both are now bounded. The package test carries fixtures for both branches plus a boundary case, and well-formed bitmaps as controls. The 4-bit bound is offered upstream as fontforge/fontforge#5918.
Status
Impact
Waiting on upstream to publish a fixed version for this vulnerability.
Status