Vulnerability Spotlight: Microsoft Windows CDD Font Parsing Kernel Memory Corruption
Summary: Cisco Talos researchers Andrea Allievi and Piotr Bania discovered a memory corruption vulnerability in the Microsoft Windows CDD Font Parsing Kernel Driver, disclosed alongside a Microsoft security advisory issued on September 8th. A specially crafted font file can cause the driver to corrupt internal memory structures, because the FillColorKeyCallback routine does not properly check the width and height of the background rectangle and the DrvTextOut routine does not correctly handle the resulting error condition.
What you should know: The flaw sits in a kernel driver that parses font files, so the trigger is a document a user opens rather than a network service an attacker has to reach - and the failure mode is corruption of internal memory structures in the kernel.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026