CVE-2025-20001CWE-125

An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015

Medium · published June 2, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-06-02T14:54Z
EPSS history
Timeline
  • 02 JUN 14:54Z
    An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015
    cvelistv5