Main
Vulnerability Database
Exploits
ID:12542 - Exploit for Path traversal in fontTools - CVE-2025-66034
ID:12542 - Exploit for Path traversal in fontTools - CVE-2025-66034
Published: April 1, 2026
Vulnerability identifier: #VU118845
Vulnerability risk: High
CVE-ID: CVE-2025-66034
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
fontTools
fontTools
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to input validation error when processing .designspace files in fontTools.varLib. A remote attacker can trick the victim into passing a specially crafted file and overwrite arbitrary files on the system.
Remediation
Install updates from vendor's website.