OTFCC Buffer Overflow Vulnerability (CNVD-2024-08554)

2022-08-1900:00:00

China National Vulnerability Database

www.cnvd.org.cn

otfcc

buffer overflow

opentype

vulnerability

exploitation

segmentation violation

program crash

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

36.8%

JSON

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6babea file, which can be exploited by an attacker to cause a program crash.