CVE-2020-37011

HIGH

Gnome Fonts Viewer 3.34.0 Heap Corruption

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-37011 has a selected CVSS score of 8.4 (high); EIP currently links 1 catalogued exploit.

Description

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc() calls and potentially crash the gnome-font-viewer process.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Fonts Viewer

Browse GNOME / Fonts Viewer
CVE List3.34.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBGnome Fonts Viewer 3.34.0 - Heap CorruptionExploitDB exploitby Cody WinklerNot analyzed1 file
ExploitDB
PoC details

References

5