CVE-2019-19308

Name of the Vulnerable Software and Affected Versions gnome-font-viewer version 3.34.0

Description The issue arises from a NULL pointer dereference in the text to glyphs function in sushi-font-widget.c while parsing a TTF font file that lacks a name section. This occurs due to a g strconcat call that returns NULL.

Recommendations For gnome-font-viewer version 3.34.0, consider avoiding the use of TTF font files that lack a name section until a patch is available. As a temporary workaround, restrict the parsing of such files to minimize the risk of exploitation.