A vulnerability classified as critical was found in FontForge. The impacted element is an unknown function of the component SFD File Parser. The manipulation results in use after free.
This vulnerability is known as CVE-2025-15280. It is possible to launch the attack remotely. No exploit is available.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
