Cloudanix VulnDB

CVE-2025-50951

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Oct 23, 2025

CISA due date

—

The record

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.

Affected packages

Ecosystem Package Introduced Fixed