CVE-2018-20588

The CVE-2018-20588 issue is in otfcc v0.10.3-alpha (libotfcc.a), specifically the file lib/support/unicodeconv/unicodeconv.c, where a buffer over-read/overflow exists in the Unicode conversion routine. CNVD-2019-03337 and OSV entries describe a buffer overflow vulnerability in this component, wit...