OTFCC 缓冲区错误漏洞

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b03b5 when handling untrusted input. An attacker could exploit the...