EIP-2026-103509

This exploit demonstrates a heap-based buffer overread in Graphite2's gr2FontTest utility, triggered by a malformed font file. The vulnerability occurs in the `CheckCmapSubtable12` function, leading to a crash due to an out-of-bounds memory read.