3 ms·
Font: https://developer.apple.com/fonts/TrueType-Reference-Manual/RM05/Chap5.html https://developer.apple.com/fonts/TrueType-Reference-Manual/..., there's a lot
by rfoo 3y ago
Font: https://developer.apple.com/fonts/TrueType-Reference-Manual/RM05/Chap5.html https://developer.apple.com/fonts/TrueType-Reference-Manual/..., there's a lot of exploits in various implementations about ten years ago: https://security.stackexchange.com/questions/91347/how-can-a-font-be-used-for-privilege-escalation https://security.stackexchange.com/questions/91347/how-can-a.... There's still active ITW exploits in 2023: https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-26369.html https://googleprojectzero.github.io/0days-in-the-wild//0day-...
Image: The famous JBIG2.
Video: https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)