Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.06857·Published 2015-06-08·Will not fixCWE-119