Notes on Windows Uniscribe Fuzzing
Google Project Zero's Mateusz Jurczyk reports that fuzzing the user-mode Windows Uniscribe library (usp10.dll) in late 2016 produced 8 high-severity issues that could allow remote code execution, all but one reachable through a standard DrawText call and...