CVE-2020-37011: Gnome Fonts Viewer

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc() calls and potentially crash the gnome-font-viewer process.

Affected products

• Gnome Fonts Viewer: version 3.34.0 only

Published 2026-01-29. Last modified 2026-06-17.