system
Describe <CVE-2017-11574>.
user
What is <CVE-2017-11574>?
assistant
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file..