OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10599)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b05ce when handling untrusted input. An attacker could exploit the...