OTFCC Buffer Overflow Vulnerability (CNVD-2023-11999)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC is vulnerable to a buffer overflow vulnerability that originates from the /release-x64/otfccdump 0x65fc97 commit package containing a heap buffer overflow. No detailed vulnerability details are currently available.