A number of Windows kernel crashes in the win32k.sys driver exist while processing a specific corrupted TTF font file. This finding documents an overflow with a malformed TrueType program.
aa2c793abdcbae42410e9648120375bbbf61f199aadac00919c7cae1a9e4ac95