Out-of-bounds Read in High-Logic Fontcreator
CVE-2025-20001
An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (37.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
Affected products
- High-logic Fontcreator — versions 15.0.0.3015
Weakness classification (CWE)
References
- talos-cna@cisco.com (Exploit, Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-20001?
- CVE-2025-20001 is a medium-severity vulnerability in High-Logic Fontcreator, classified under Out-of-bounds Read. CVSS score: 6.5/10. Published 2025-06-02.
- How severe is CVE-2025-20001?
- Medium severity. CVSS v3 base score is 6.5 out of 10.