EIP-2026-114956
PRE-CVEAvast! - Integer Overflow Verifying numFonts in TTC Header
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114956. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit describes an integer overflow vulnerability in the TTC header parsing logic, specifically in the `filevirus_ttf()` function when processing the `numFonts` field. The issue occurs due to improper bounds checking, leading to a buffer overflow when `numFonts` exceeds `(SIZE_MAX+1) / 4`.
Description
Avast! - Integer Overflow Verifying numFonts in TTC Header
Exploits (1)
The exploit describes an integer overflow vulnerability in the TTC header parsing logic, specifically in the `filevirus_ttf()` function when processing the `numFonts` field. The issue occurs due to improper bounds checking, leading to a buffer overflow when `numFonts` exceeds `(SIZE_MAX+1) / 4`.