CVE-2019-19308

—

CVSS 3.1

5.5 medium

EPSS

<1%p58

Published

Nov 27, 2019 (Nov 27, 2019)

Modified

Jun 17, 2026

Description

In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).

Vendors: gnome
Products: gnome-font-viewer
Weakness: CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.