CVE-2017-11576: Fontforge

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.

Affected products

• Fontforge Fontforge: version 20161012 only

Published 2017-07-23. Last modified 2026-06-17.