Out-of-bounds Read in High-Logic Fontcreator
CVE-2025-20001
An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.005 (42.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 42.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- High-Logic Fontcreator — versions 15.0.0.3015
Weakness classification (CWE)
References
- talosintelligence.com/vulnerability_reports/TALOS-2025-2157 (Exploit, Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2025-20001?
- CVE-2025-20001 is a medium-severity vulnerability in High-Logic Fontcreator, classified under Out-of-bounds Read. CVSS score: 6.5/10. Published 2025-06-02.
- How severe is CVE-2025-20001?
- Medium severity. CVSS v3 base score is 6.5 out of 10.