EIP-2026-102595

This exploit demonstrates a heap-based out-of-bounds memory read vulnerability in FreeType's handling of the 'cmap' (format 14) SFNT table. The provided PoC files trigger the vulnerability, leading to a heap-buffer-overflow detected by AddressSanitizer.