tomolt CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM tomolt CVE published 2026-10-14

CVE-2026-110605

libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. This vulnerability can be triggered when a crafted TrueType font with NaN glyph coordinates bypasses clip_points(), causing an out-of-bounds raster read in draw_line() during sft_render() and crashing the process. Defenders should assess [truncated]