CVE-2017-11572

CVE-2017-11572 describes a heap-based buffer over-read vulnerability in FontForge 20161012, specifically within the readcfftopdicts function, which can be triggered by a specially crafted OTF file. This flaw carries a high severity CVSS score of 7.8, indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to denial of service or arbitrary code execution. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.