EIP-2026-115658
PRE-CVEMicrosoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-115658. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit demonstrates a memory corruption vulnerability in Microsoft Font Subsetting DLL (fontsub.dll) where a malformed font file triggers an access violation in ComputeFormat4CmapData due to a 0-sized buffer allocation. The crash occurs when the function attempts to write to an invalid memory location, leading to a denial-of-service condition.
Description
Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData
Exploits (1)
The exploit demonstrates a memory corruption vulnerability in Microsoft Font Subsetting DLL (fontsub.dll) where a malformed font file triggers an access violation in ComputeFormat4CmapData due to a 0-sized buffer allocation. The crash occurs when the function attempts to write to an invalid memory location, leading to a denial-of-service condition.