Lucene search

K
osvGoogleOSV:CVE-2022-23318
HistoryFeb 17, 2022 - 1:15 p.m.

CVE-2022-23318

2022-02-1713:15:07
Google
osv.dev
4

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.

CPENameOperatorVersion
pcf2bdfeq1.04

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%