Debian Linux Security Advisory 2253-1 – Ulrik Persson reported a stack-based buffer overflow flaw in FontForge, a font editor. When processed a crafted Bitmap Distribution Format (BDF) FontForge could crash or execute arbitrary code with the privileges of the user running FontForge.
Source: Debian Security Advisory 2253-1
