CVE-2025-66034

Name of the Vulnerable Software and Affected Versions fontTools versions 4.33.0 through 4.60.1

Description fontTools is a Python library used for manipulating fonts. A flaw exists in the fontTools.varLib script, specifically within the main() code path, which can lead to arbitrary file write and potential remote code execution when processing a malicious .designspace file. This issue impacts the fontTools.varLib command-line interface and any code that calls fontTools.varLib.main().

Recommendations Update fontTools to version 4.60.2 or later.