CVE-2025-20001

High-Logic FontCreator 15.0.0.3015 is affected by CVE-2025-20001 (TALOS-2025-2157): an out-of-bounds read in the GSUB subtable processing of OpenType fonts, leading to potential disclosure of sensitive information when a user opens a specially crafted font file. Exploitation requires user interac...