CVE-2022-29777

2022-06-0214:15:51

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

JSON

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.

CPENameOperatorVersion
coreeq5.3.99.1532
coreeq5.3.0.167
coreeqcore-win-32/releaseFv5.0.0-5
coreeq4.5.dev.167
coreeqcore-win-64/hotfixFv5.2.8-104
coreeq5.4.0.18
coreeq4.3.5.6
coreeqcore-linux-64/develop-255
coreeqcore-win-64/develop-294
coreeq5.2.4.73

Name	Operator	Version
core	eq	5.3.99.1532
core	eq	5.3.0.167
core	eq	core-win-32/releaseFv5.0.0-5
core	eq	4.5.dev.167
core	eq	core-win-64/hotfixFv5.2.8-104
core	eq	5.4.0.18
core	eq	4.3.5.6
core	eq	core-linux-64/develop-255
core	eq	core-win-64/develop-294
core	eq	5.2.4.73