CVE-2017-11575

CVE-2017-11575 describes a buffer over-read vulnerability in FontForge 20161012, specifically within the strnmatch function called by readttfcopyrights. This flaw allows an attacker to trigger a Denial of Service or potentially achieve arbitrary code execution by enticing a user to open a specially crafted OTF font file. The vulnerability is rated High severity (CVSS 7.8), indicating a low attack complexity and the potential for significant impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.