Linux Distros Unpatched Vulnerability : CVE-2022-35036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8. CVE-2022-35036 Note that Nessus relies on the presenc...

DEBIAN-CVE-2022-35036

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8...

CVE-2022-35036

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8...

CVE-2022-35036

The CVE-2022-35036 issue concerns Caryll OTFCC, a C library/tooling for parsing OpenType fonts. The underlying problem is a heap buffer overflow triggered by a boundary condition in /release-x64/otfccdump+0x6e1fc8 when processing untrusted input, as described in multiple sources. The exposure is ...