CVE-2017-11575

FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.

• CWE-125

• http://www.debian.org/security/2017/dsa-3958
• https://github.com/fontforge/fontforge/issues/3096Issue Tracking, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3958
• https://github.com/fontforge/fontforge/issues/3096Issue Tracking, Patch, Third Party Advisory

Published

Jul 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1157IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an …
• CVE-2017-11570FontForge 20161012 is vulnerable to a buffer over-read in um…
• CVE-2017-11571FontForge 20161012 is vulnerable to a stack-based buffer ove…
• CVE-2017-11572FontForge 20161012 is vulnerable to a heap-based buffer over…
• CVE-2017-11573FontForge 20161012 is vulnerable to a buffer over-read in Va…
• CVE-2017-11574FontForge 20161012 is vulnerable to a heap-based buffer over…
• CVE-2017-11576FontForge 20161012 does not ensure a positive size in a weig…
• CVE-2017-11577FontForge 20161012 is vulnerable to a buffer over-read in ge…
• CVE-2017-11578It was discovered as a part of the research on IoT devices i…
• CVE-2017-11579In the most recent firmware for Blipcare, the device provide…
• CVE-2017-11580Blipcare Wifi blood pressure monitor BP700 10.1 devices allo…
• CVE-2017-11581dayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin…