CVE-2017-11568

CVE-2017-11568 is a heap-based buffer over-read vulnerability in FontForge 20161012, specifically within the PSCharStringToSplines function in psread.c. This flaw allows an attacker to trigger a Denial of Service or potentially achieve arbitrary code execution by enticing a user to open a specially crafted OTF file. With a CVSS score of 7.8 (High), it requires user interaction and local access, but successful exploitation could lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there publicly available exploit modules in common frameworks like Metasploit or Nuclei, and it has received minimal community discussion.