[Bug 2426581] New: CVE-2025-15271 fontforge: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability [fedora-42]

https://bugzilla.redhat.com/show_bug.cgi?id=2426581

Bug ID: 2426581
           Summary: CVE-2025-15271 fontforge: FontForge SFD File Parsing
                    Improper Validation of Array Index Remote Code
                    Execution Vulnerability [fedora-42]
           Product: Fedora
           Version: 42
            Status: NEW
        Whiteboard: {"flaws": ["cae1f386-b0d8-46dc-b522-63f7de7200a5"]}
         Component: fontforge
          Keywords: Security, SecurityTracking
          Severity: high
          Priority: high
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail]
            Blocks: 2426422
  Target Milestone: ---
    Classification: Fedora

Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.

The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essenti...