CVE-2020-5395

FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.

• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlThird Party Advisory
• https://github.com/fontforge/fontforge/issues/4084Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S75EAVF4KPCH3WFBMZADUAU7EAXA7ZQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MH6PKVQLBKIO7LQPDXB3MKI5I6AMDCN6/
• https://security.gentoo.org/glsa/202004-14Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.htmlThird Party Advisory
• https://github.com/fontforge/fontforge/issues/4084Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S75EAVF4KPCH3WFBMZADUAU7EAXA7ZQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MH6PKVQLBKIO7LQPDXB3MKI5I6AMDCN6/
• https://security.gentoo.org/glsa/202004-14Third Party Advisory

Published

Jan 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5388Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 c…6.9
• CVE-2020-5389Dell EMC OpenManage Integration for Microsoft System Center …6.5
• CVE-2020-5390PySAML2 before 5.0.0 does not check that the signature in a …7.5
• CVE-2020-5391Cross-site request forgery (CSRF) vulnerabilities exist in t…8.8
• CVE-2020-5392A stored cross-site scripting (XSS) vulnerability exists in …6.1
• CVE-2020-5393In Appspace On-Prem through 7.1.3, an adversary can steal a …6.1
• CVE-2020-5396VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9…8.8
• CVE-2020-5397Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerab…5.3
• CVE-2020-5398In Spring Framework, versions 5.2.x prior to 5.2.3, versions…7.5
• CVE-2020-5399Cloud Foundry CredHub, versions prior to 2.5.10, connects to…7.4
• CVE-2020-5400Cloud Foundry Cloud Controller (CAPI), versions prior to 1.9…6.5
• CVE-2020-5401Cloud Foundry Routing Release, versions prior to 0.197.0, co…5.3