CVE-2019-19308: Gnome Gnome-Font-Viewer

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

Affected products

• Gnome Gnome-Font-Viewer: version 3.34.0 only

Published 2019-11-27. Last modified 2026-06-17.