OTFCC Buffer Overflow Vulnerability (CNVD-2023-11779)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions contain a buffer overflow vulnerability that stems from /release-x64/otfccdump 0x6b5567 boundary error when processing untrusted input, which can be exploited by an attacker to cause a program crash.