CVE-2017-11570

Name of the Vulnerable Software and Affected Versions FontForge version 20161012

Description The issue is related to a buffer over-read in the umodenc function, located in parsettf.c, which can be triggered by a crafted otf file. This can result in a denial of service (DoS) or potentially allow for code execution.

Recommendations For FontForge version 20161012, consider avoiding the use of crafted otf files until a patch is available. As a temporary workaround, restrict access to the umodenc function in parsettf.c to minimize the risk of exploitation.