A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in AlternateSubstitutionSubtable::process.
711068adf214eb589d571d06d8497f1cfb5051a638536518b30c31c08d5d0231