Font Handling Issues in TCPDF and tc-lib-pdf-font

CVE-2024-56520

What is CVE-2024-56520?

An issue has been identified in tc-lib-pdf-font, which impacts the way fonts are managed within TCPDF and related products. Specifically, prior to the version 2.6.4 of tc-lib-pdf-font and version 6.8.0 of TCPDF, there were misparsing issues with the FontBBox for Type 1 and TrueType fonts. This flaw may lead to unexpected behaviors in documents that utilize these font types, potentially affecting the display or rendering of text within generated PDF files. Users of these affected versions are urged to update to the latest releases to mitigate risks associated with this vulnerability.

References