EIP-2026-103506

This exploit demonstrates a heap-based buffer overflow in Graphite2's GlyphCache due to incorrect handling of the _num_glyphs field, allowing an attacker to control the overflow size. The PoC modifies gr2FontTest to trigger the vulnerability with a crafted input file.