CVE-2022-35456: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087...

CVE-2022-35459: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a...

CVE-2022-35460: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35461: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32...

CVE-2022-35448: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af...

CVE-2022-35474: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e...

CVE-2022-35463: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35465: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414...

CVE-2022-35483: Out-of-bounds Read

OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8...

PT-2022-22832 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b05ce endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

CVE-2022-35475: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8...

PT-2022-22851

Name of the Vulnerable Software and Affected Versions OTFCC version 0.10.4 Description A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6e41a8 endpoint. Recommendations For OTFCC version 0.10.4, consider restricting access to the...

CVE-2022-35482: Out-of-bounds Read

OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...

PT-2022-22823 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue can be exploited via the /release-x64/otfccdump+0x6b55af endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no...

PT-2022-22829 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b05aa endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

CVE-2022-35451: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5...

PT-2022-22824 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue is related to the /release-x64/otfccdump+0x6b0466 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information...

CVE-2022-35466: Out-of-bounds Write

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473...

PT-2022-22841 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue is related to the /release-x64/otfccdump+0x6c0473 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information...

OTFCC Buffer Overflow Vulnerability (CNVD-2025-02618)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a buffer overflow vulnerability that originates from a heap buffer overflow after release via otfccbuild.c. No detailed vulnerability details are provided at this time...