CVE-2022-35059

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414...

PT-2022-22539 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0414 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35058

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce...

CVE-2022-35049

CVE-2022-35049 concerns the OTFCC project: commit 617837b introduces a heap buffer overflow in the /release-x64/otfccdump+0x6b03b5 handler when processing untrusted input. The vulnerability impact is described as a crash risk (heap overflow) with a base CVSS v3.1 score of 6.5 (Network attack, no ...

CVE-2022-35052

CVE-2022-35052 concerns OTFCC, a C library and utility for OpenType font files. The affected component is the otfccdump path in OTFCC, where commit 617837b is reported to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1. The public descriptions consistently cite a boundary/heap ...

CVE-2022-35059

CVE-2022-35059 involves a heap/buffer overflow in the OTFCC library routine at /release-x64/otfccdump+0x6c0414. Affected are OTFCC versions 0.10.4 and earlier (likely through 0.10.x prior to fixed release). The underlying cause is a boundary error when processing untrusted input, enabling a crash...

CVE-2022-35050

CVE-2022-35050: OTFCC commit 617837b contains a heap buffer overflow in the /release-x64/otfccdump+0x6b04de path. The vulnerability stems from a boundary error when handling untrusted input, potentially leading to a program crash (availability impact). Affected software is OTFCC (Caryll OpenType ...

CVE-2022-35046

CVE-2022-35046 affects OTFCC, specifically the otfccdump+0x6b0466 path, where a boundary/heap buffer overflow can be triggered by untrusted input, potentially crashing the program. The CVSS data in the records indicates network access with low attack complexity and user interaction required, caus...

CVE-2022-35059

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414...

CVE-2022-35054

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2...

CVE-2022-35056

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35051

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af...

CVE-2022-35050

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de...

CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35047

CVE-2022-35047 refers to a heap buffer overflow in OTFCC, specifically in commit 617837b, triggered by handling input at /release-x64/otfccdump+0x6b05aa. The vulnerability concerns the OTFCC library, used to parse and write OpenType font files, where a boundary error can cause a program crash (av...

CVE-2022-35055

CVE-2022-35055 affects the OTFCC library. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6c0473, observed in OTFCC commit 617837b (affecting 0.10.4 and earlier). Impact is a possible program crash; no information is provided about code execution or broader system compromise....

CVE-2022-35054

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2...

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35050

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de...