CVE-2024-25081: Debian Linux

Medium severity, CVSS 4.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 40 only
• Fontforge Fontforge: up to and including 20230101

Published 2024-02-26. Last modified 2026-06-17.