CVE-2017-11571

Name of the Vulnerable Software and Affected Versions FontForge version 20161012

Description The issue is related to a stack-based buffer overflow in the addnibble function, located in parsettf.c, which can be triggered by a crafted otf file. This can result in a denial of service (DoS) or potentially allow for code execution.

Recommendations For FontForge version 20161012, consider avoiding the use of crafted otf files until a patch is available. As a temporary workaround, restrict access to the addnibble function in parsettf.c to minimize the risk of exploitation.