CVE-2025-15269 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-15269 Interim 1 1 2026-03-05T01:24:19Z current 2026-03-05T01:24:19Z 2026-03-05T01:24:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-15269 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-February/002480.html E-Mail link for RHSA-2026:2213 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024340.html E-Mail link for SUSE-SU-2026:20435-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.13 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.37 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.39 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.25 Image SL-Micro Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Leap 16.0 openSUSE Tumbleweed curl-8.14.1-slfo.1.1_2.1 fontforge fontforge-20201107-7.el9_6 fontforge-20251009-160000.1.1 fontforge-20251009-4.1 fontforge-devel fontforge-devel-20251009-160000.1.1 fontforge-devel-20251009-4.1 fontforge-doc fontforge-doc-20251009-160000.1.1 fontforge-doc-20251009-4.1 libcurl-mini4-8.14.1-slfo.1.1_2.1 libcurl4-8.14.1-slfo.1.1_2.1 libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest curl-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest curl-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/toolbox:latest libcurl4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.13 curl-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/base-os-container:2.2.1-5.37 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/base-os-container:2.2.1-5.37 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.39 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.25 curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-Azure libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-Azure libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-EC2 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-GCE libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-GCE curl-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-EC2 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SL-Micro-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-Azure libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-Azure libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-EC2 libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-GCE libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-GCE curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-EC2 libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-GCE libcurl-mini4-8.14.1-slfo.1.1_2.1 as a component of Image SLE-Micro-GCE curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc curl-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd libcurl4-8.14.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd fontforge-20201107-7.el9_6 as a component of SUSE Liberty Linux 9 fontforge-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge-devel-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge-doc-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 fontforge-devel-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 fontforge-doc-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 fontforge-20251009-160000.1.1 as a component of openSUSE Leap 16.0 fontforge-devel-20251009-160000.1.1 as a component of openSUSE Leap 16.0 fontforge-doc-20251009-160000.1.1 as a component of openSUSE Leap 16.0 fontforge-20251009-4.1 as a component of openSUSE Tumbleweed fontforge-devel-20251009-4.1 as a component of openSUSE Tumbleweed fontforge-doc-20251009-4.1 as a component of openSUSE Tumbleweed fontforge-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge-devel-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge-doc-20251009-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 fontforge as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS fontforge as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS fontforge as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 fontforge as a component of SUSE Linux Enterprise Server 15 SP2-LTSS fontforge as a component of SUSE Linux Enterprise Server 15 SP3-LTSS fontforge as a component of SUSE Linux Enterprise Server 15 SP4-LTSS fontforge as a component of SUSE Linux Enterprise Server 15 SP5-LTSS fontforge as a component of SUSE Linux Enterprise Server 15 SP6-LTSS fontforge as a component of SUSE Linux Enterprise Server Teradata 15 SP4 fontforge as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 fontforge as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 fontforge as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 fontforge as a component of openSUSE Leap 15.6 fontforge-devel as a component of openSUSE Leap 15.6 fontforge-doc as a component of openSUSE Leap 15.6 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28564. CVE-2025-15269 Container suse/sl-micro/6.0/baremetal-os-container:latest:libcurl-mini4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/base-os-container:latest:curl-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/base-os-container:latest:libcurl-mini4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/kvm-os-container:latest:libcurl-mini4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/rt-os-container:latest:libcurl-mini4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/toolbox:latest:curl-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/toolbox:latest:libcurl-mini4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.13:libcurl4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.37:curl-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.37:libcurl4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.39:libcurl4-8.14.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.25:libcurl4-8.14.1-slfo.1.1_2.1 Image SL-Micro:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SL-Micro-Azure:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro-Azure:libcurl4-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-Azure:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-Azure:libcurl4-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-EC2:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-EC2:libcurl4-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-GCE:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro-BYOS-GCE:libcurl4-8.14.1-slfo.1.1_2.1 Image SL-Micro-EC2:curl-8.14.1-slfo.1.1_2.1 Image SL-Micro-EC2:libcurl4-8.14.1-slfo.1.1_2.1 Image SLE-Micro:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-Azure:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-Azure:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-Azure:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-Azure:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-EC2:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-EC2:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-GCE:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-GCE:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-EC2:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-EC2:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SLE-Micro-GCE:curl-8.14.1-slfo.1.1_2.1 Image SLE-Micro-GCE:libcurl-mini4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:libcurl4-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:curl-8.14.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:libcurl4-8.14.1-slfo.1.1_2.1 SUSE Liberty Linux 9:fontforge-20201107-7.el9_6 SUSE Linux Enterprise Server 16.0:fontforge-20251009-160000.1.1 SUSE Linux Enterprise Server 16.0:fontforge-devel-20251009-160000.1.1 SUSE Linux Enterprise Server 16.0:fontforge-doc-20251009-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:fontforge-20251009-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:fontforge-devel-20251009-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:fontforge-doc-20251009-160000.1.1 openSUSE Leap 16.0:fontforge-20251009-160000.1.1 openSUSE Leap 16.0:fontforge-devel-20251009-160000.1.1 openSUSE Leap 16.0:fontforge-doc-20251009-160000.1.1 openSUSE Tumbleweed:fontforge-20251009-4.1 openSUSE Tumbleweed:fontforge-devel-20251009-4.1 openSUSE Tumbleweed:fontforge-doc-20251009-4.1 SUSE Linux Enterprise Server 16.0:fontforge-20251009-160000.1.1 SUSE Linux Enterprise Server 16.0:fontforge-devel-20251009-160000.1.1 SUSE Linux Enterprise Server 16.0:fontforge-doc-20251009-160000.1.1 important 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H