CVE-2017-11572

Published July 23rd, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.

fontforge/fontforge

Free (libre) font editor for Windows, Mac OS X and GNU+Linux

GitHub

7.77K