{"action":"Upgrade tecnickcom/tc-lib-pdf-font to 2.6.4 or later.","affected":[{"fixed":"2.6.4","introduced":"0"}],"component":"tecnickcom/tc-lib-pdf-font","cve_ids":["CVE-2024-56520"],"ecosystem":"Packagist","epss":0.00557,"exploited":false,"fixed_versions":["2.6.4"],"ghsa_id":"GHSA-grhh-r4jj-8jh7","id":"tcs_01M5KF32JFCCY8PB9EKQTT1797","modified_at":"2025-11-04T16:42:13.035966Z","published_at":"2024-12-27T06:30:47Z","references":["https://osv.dev/vulnerability/GHSA-grhh-r4jj-8jh7","https://nvd.nist.gov/vuln/detail/CVE-2024-56520","https://github.com/tecnickcom/TCPDF/commit/a0a02efe487cc39bd5223359e916dbeafb5cd6fe","https://github.com/tecnickcom/tc-lib-pdf-font/commit/30012e333ae611c514ec2dc7cb370bbf4da4e677","https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0","https://github.com/tecnickcom/tc-lib-pdf-font","https://github.com/tecnickcom/tc-lib-pdf-font/compare/2.6.2...2.6.4","https://lists.debian.org/debian-lts-announce/2025/06/msg00004.html","https://tcpdf.org"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-grhh-r4jj-8jh7","url":"https://osv.dev/vulnerability/GHSA-grhh-r4jj-8jh7"},{"source":"nvd","source_id":"CVE-2024-56520","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56520"}],"summary":"tecnickcom/tc-lib-pdf-font mishandles fonts"}