AliElKhatteb/CVE-2024-25082_CVE-2024-25081

PoC

FontForge Splinefont Crafted Filename Command Injection Vulnerability

view exploit source poc_in_githubauthor AliElKhattebpublished 2026-03-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-25082US	—	1.87% (79th)	Exploit	2024-02-26
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.