CVE-2024-56520

Packagist/tecnickcom/tc-lib-pdf-font CVE-2024-56520: high 7.3, EPSS 0.56%

tecnickcom/tc-lib-pdf-font mishandles fonts

Action: Upgrade tecnickcom/tc-lib-pdf-font to 2.6.4 or later.

composer require tecnickcom/tc-lib-pdf-font:2.6.4

Affected

Fixed versions

Sources

• osv: GHSA-grhh-r4jj-8jh7
• nvd: CVE-2024-56520
• https://github.com/tecnickcom/TCPDF/commit/a0a02efe487cc39bd5223359e916dbeafb5cd6fe
• https://github.com/tecnickcom/tc-lib-pdf-font/commit/30012e333ae611c514ec2dc7cb370bbf4da4e677
• https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
• https://github.com/tecnickcom/tc-lib-pdf-font
• https://github.com/tecnickcom/tc-lib-pdf-font/compare/2.6.2...2.6.4
• https://lists.debian.org/debian-lts-announce/2025/06/msg00004.html
• https://tcpdf.org

CVE-2024-56520 · published 2024-12-27T06:30:47Z · modified 2025-11-04T16:42:13.035966Z · JSON