CVE-2025-15270
Improper Array Index Validation in FontForge SFD Parsing Enables RCE
Publication date: 2025-12-31
Last updated on: 2025-12-31
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fontforge | fontforge | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-129 | The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in FontForge occurs due to improper validation of array indices when parsing SFD (Spline Font Database) files. Specifically, user-supplied data is not properly checked, which can cause a write operation beyond the allocated array bounds. This flaw can be exploited remotely if a user opens a malicious file or visits a malicious webpage, allowing an attacker to execute arbitrary code with the current user's privileges. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability allows an attacker to execute arbitrary code on your system with the same privileges as the current user. This can lead to unauthorized actions such as installing malware, stealing data, or taking control of the affected system. Exploitation requires user interaction, like opening a malicious file or visiting a malicious webpage. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, avoid opening SFD files from untrusted sources or visiting untrusted webpages that may contain malicious SFD files. Ensure that your FontForge installation is updated with any patches addressing this issue once available. Additionally, restrict user privileges to limit the impact of potential exploitation. [1]