EIP-2026-115658

The exploit demonstrates a memory corruption vulnerability in Microsoft Font Subsetting DLL (fontsub.dll) where a malformed font file triggers an access violation in ComputeFormat4CmapData due to a 0-sized buffer allocation. The crash occurs when the function attempts to write to an invalid memory location, leading to a denial-of-service condition.