CVE-2018-20588: Otfcc Project Otfcc

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read.

Affected products

• Otfcc Project Otfcc: version 0.10.3 only

Published 2018-12-30. Last modified 2026-06-17.