CVE-2020-37011

A flaw was found in Gnome Fonts Viewer. An attacker can exploit this vulnerability by crafting a malicious TrueType Font (TTF) file with an oversized pattern. This can trigger a heap corruption, leading to an out-of-bounds write and an infinite memory allocation loop. Successful exploitation can cause the application to crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid opening untrusted TrueType Font (TTF) files with Gnome Fonts Viewer. If the Gnome Fonts Viewer application is not required, it can be removed. Removing gnome-font-viewer may also remove other GNOME desktop components if they depend on it, potentially impacting graphical desktop functionality. Server installations without a graphical environment are not affected.