CVE-2022-23318: PCF2BDF Project PCF2BDF

High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.

Affected products

• PCF2BDF Project PCF2BDF: version 1.04 only; version 1.05 only

Published 2022-02-17. Last modified 2026-06-17.