2017-07-23 22:00:00
mitre
PUBLISHED
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.