[Bug 2426592] New: CVE-2025-15278 fontforge: FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability [fedora-42]

https://bugzilla.redhat.com/show_bug.cgi?id=2426592

Bug ID: 2426592
           Summary: CVE-2025-15278 fontforge: FontForge GUtils XBM File
                    Parsing Integer Overflow Remote Code Execution
                    Vulnerability [fedora-42]
           Product: Fedora
           Version: 42
            Status: NEW
        Whiteboard: {"flaws": ["4b0e37b3-aee4-492b-a36a-853ead6f8450"]}
         Component: fontforge
          Keywords: Security, SecurityTracking
          Severity: high
          Priority: high
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail],
                    [e-mail]
            Blocks: 2426433
  Target Milestone: ---
    Classification: Fedora

Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.

The following link provides references to all essential vulnerability
management information. If something is wrong or missing, please contact a
member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essenti...