VYPR

libschrift

by Tomolt

CVEs (1)

  • CVE-2026-110605MedOct 14, 2026
    risk 0.36cvss 5.5epss —

    libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clip_points(), causing an…