Lucene search

China National Vulnerability DatabaseCNVD-2024-08552

HistoryAug 19, 2022 - 12:00 a.m.

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08552)

2022-08-1900:00:00

China National Vulnerability Database

www.cnvd.org.cn

otfcc

buffer overflow

opentype

version 0.10.4

segmentation violation

exploited

attacker

program crash

font files

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

36.8%

JSON

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6b6a8f file, which can be exploited by an attacker to cause a program crash.