DEBIAN-CVE-2022-35025

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8...

DEBIAN-CVE-2022-35027

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...

DEBIAN-CVE-2022-35022

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae...

CVE-2022-35023

OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2022-35024

OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S...

CVE-2022-35027

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...

CVE-2022-35028

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6...

Design/Logic Flaw

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b...

CVE-2022-35038

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d...

CVE-2022-35037

The CVE refers to OTFCC commit 617837b containing a heap buffer overflow in /release-x64/otfccdump+0x6adb1e. This affects Caryll OTFCC (Caryll OpenType font parsing/writing library) when handling untrusted input, with the impact described as a program crash. The provided documents do not specify ...

CVE-2022-35037

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e...

CVE-2022-35036

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8...

CVE-2022-35035

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f...

CVE-2022-35035

The vulnerability CVE-2022-35035 concerns Caryll OTFCC, where a heap buffer overflow is triggered by processing untrusted input in /release-x64/otfccdump+0x6b559f within the OTFCC commit 617837b. The available documents identify the affected component as OTFCC (Caryll OTFCC) and describe a bounda...

CVE-2022-35034

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d...

CVE-2022-35032

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...

CVE-2022-35032

CVE-2022-35032 affects the OpenType font toolchain project OTFCC. The vulnerability is a segmentation violation in commit 617837b, triggered via /release-x64/otfccdump+0x6b6a8f. Available sources describe an availability impact, but the documents do not provide a vendor patch, remediation steps, ...

CVE-2022-35032

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...

CVE-2022-35032

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...

CVE-2022-35031

CVE-2022-35031 concerns Caryll OTFCC. Affected component: the otfccdump tool (OTFCC commit 617837b) where a segmentation fault occurs at otfccdump+0x703969. This can crash the program, leading to a denial of service as indicated by multiple sources in the connected data. Exploitation is described...