CVE-2017-11570 is a buffer over-read vulnerability in FontForge 20161012, specifically within the umodenc function (parsettf.c), which can be triggered by a specially crafted otf file. This high-severity vulnerability (CVSS 7.8) allows for potential denial of service or arbitrary code execution, requiring user interaction to open the malicious file. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
20161012CPE matchmatch criteria | cpe:2.3:a:fontforge:fontforge:20161012:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.