Back Linuxsecurity

Fedora 41: FontForge Important Memory Leak Issue CVE-2025

Linuxsecurity •LinuxSecurity Advisories • November 6, 2025

FontForge (former PfaEdit) is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Update Information : CVE-2025-50949

FontForge (former PfaEdit) is a font editor for outline and bitmap

fonts. It supports a range of font formats, including PostScript

(ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType

(Type2) and CID-keyed fonts.

* Tue Oct 28 2025 Parag Nemade - 20230101-16 - Move to use %autosetup macro so that we will not forget to apply patches * Mon Oct 27 2025 Parag Nemade - 20230101-15 - Resolves: CVE-2025-50949

[ 1 ] Bug #2406131 - CVE-2025-50949 fontforge: Fontforge memory leak [fedora-41]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-cb6d4788a8' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Execution and Memory Leak Issues in FontForge for Fedora FontForge, a font editor used in Fedora, has been updated to address critical vulnerabilities, including CVE-2025-15279, CVE-2025-15275, and CVE-2025-15269. Additionally, an important memory leak issue identified as CVE-2025-50949 was reported for Fedora 41. Users of Fedora 41 and 42 are affected by these vulnerabilities. 3 sources 41

Extracted Entities

CVEs (1)

CVE-2025-50949