One font vulnerability to rule them all #1: Introducing the BLEND vulnerability
Google Project Zero researcher Mateusz Jurczyk disclosed a set of font-engine vulnerabilities found in a shared PostScript Charstring interpreter, including CVE-2015-0093 (Adobe's CVE-2015-3052), a flaw in the BLEND Charstring instruction present in Adobe...