PT-2025-23529
CVE-2025-20001
·
Published
2025-06-02
·
Updated
2025-08-26
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
High-Logic FontCreator version 15.0.0.3015
Description
An out-of-bounds read issue exists, allowing disclosure of sensitive information. This can be triggered by a specially crafted font file, requiring an attacker to trick a user into opening the malicious file.
Recommendations
For High-Logic FontCreator version 15.0.0.3015, avoid opening untrusted or suspicious font files until a patch is available. As a temporary workaround, consider restricting access to font files from unverified sources to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾