CVE-2025-50949: Medium severity FontForge FontForge vulnerability
FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fontforgeto a version that resolves this vulnerability.Fixed in 1:20251009+git20260808~dfsg-1 - Upgrade
Upgrade
debian/fontforgeto a version that resolves this vulnerability.Fixed in 1:20251009+git20260808~dfsg-3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-50949?
CVE-2025-50949 has been classified as a moderate severity vulnerability due to its potential to cause memory leakage.
How do I fix CVE-2025-50949?
To fix CVE-2025-50949, you should update FontForge to a version that addresses the memory leak issue, specifically after the patch is released.
What is the impact of CVE-2025-50949?
The impact of CVE-2025-50949 includes increased memory usage which can lead to application crashes and performance degradation.
Which versions of FontForge are affected by CVE-2025-50949?
CVE-2025-50949 affects FontForge version v20230101 and possibly earlier versions.
Is there a way to mitigate CVE-2025-50949 before a fix is available?
Mitigation for CVE-2025-50949 may involve monitoring memory usage closely and limiting the application's concurrent processes to prevent system overload.