CVE-2020-25690

Name	CVE-2020-25690
Description	An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
fontforge (PTS)	buster	1:20170731~dfsg-1	fixed
	buster (security)	1:20170731~dfsg-1+deb10u1	fixed
	bullseye	1:20201107~dfsg-4	fixed
	bullseye (security)	1:20201107~dfsg-4+deb11u1	fixed
	bookworm	1:20230101~dfsg-1	fixed
	trixie, bookworm (security)	1:20230101~dfsg-1.1~deb12u1	fixed
	sid	1:20230101~dfsg-1.1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
fontforge	source	(unstable)	(not affected)

- fontforge <not-affected> (Insufficient patch for CVE-2020-5395 not applied)
https://bugzilla.redhat.com/show_bug.cgi?id=1893188