A heap-buffer-overflow in pcf2bdf versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash information disclosure via program memory or other context-dependent impact.