TTC
application/x-font-ttf
Magic Bytes
Offset: 0
00 01 00 00
TrueType Collection (TTC) is a font packaging format developed and maintained by Apple and Microsoft as an extension of the TrueType specification. It allows multiple fonts to be bundled within a single file to reduce storage requirements by sharing common glyph data across different font weights and styles in modern operating systems. As a data-only container for vector outlines, the format is generally considered safe, though vulnerabilities can occur if font-rendering engines are improperly implemented.
Validation Code
How to validate .ttc files in Python
Python
def is_ttc(file_path: str) -> bool:
"""Check if file is a valid TTC by magic bytes."""
signature = bytes([0x00, 0x01, 0x00, 0x00])
with open(file_path, "rb") as f:
return f.read(4) == signature
How to validate .ttc files in Node.js
Node.js
function isTTC(buffer: Buffer): boolean {
const signature = Buffer.from([0x00, 0x01, 0x00, 0x00]);
return buffer.subarray(0, 4).equals(signature);
}
Go
func IsTTC(data []byte) bool {
signature := []byte{0x00, 0x01, 0x00, 0x00}
if len(data) < 4 {
return false
}
return bytes.Equal(data[:4], signature)
}
API Endpoint
GET
/api/v1/ttc
curl https://filesignature.org/api/v1/ttc