CVE-2022-35041

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f...

CVE-2022-35041

CVE-2022-35041 affects the OpenType font toolset OTFCC. The issue is a heap buffer overflow in OTFCC’s /release-x64/otfccdump+0x6b558f triggered by untrusted input, tracked to commit 617837b. Public sources describe a boundary-related overflow in OTFCC 0.10.4 and earlier and indicate potential cr...