Heap overflow

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

Heap overflow

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35041

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f...

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

Heap overflow

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

Heap overflow

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5...

CVE-2022-35059

CVE-2022-35059 involves a heap/buffer overflow in the OTFCC library routine at /release-x64/otfccdump+0x6c0414. Affected are OTFCC versions 0.10.4 and earlier (likely through 0.10.x prior to fixed release). The underlying cause is a boundary error when processing untrusted input, enabling a crash...

CVE-2022-35043

CVE-2022-35043 affects OTFCC (the OpenType font parsing library). A heap buffer overflow is triggered in the /release-x64/otfccdump+0x6c08a6 path, reported for commit 617837b. OTFCC 0.10.4 and earlier versions are affected; impact described as a program crash due to the boundary error when proces...

CVE-2022-35045

CVE-2022-35045 concerns the OTFCC library. A heap buffer overflow is triggered by OTFCC commit 617837b via /release-x64/otfccdump+0x6b0d63. The CVE entry notes impact as availability loss (A: High) with no confidentiality/integrity impact. The connected external records corroborate a boundary err...

CVE-2022-35046

CVE-2022-35046 affects OTFCC, specifically the otfccdump+0x6b0466 path, where a boundary/heap buffer overflow can be triggered by untrusted input, potentially crashing the program. The CVSS data in the records indicates network access with low attack complexity and user interaction required, caus...

CVE-2022-35051

CVE-2022-35051 affects the OTFCC library and its otfccdump utility. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6b55af, linked to OTFCC 0.10.4 and earlier. Impact described: potential program crash (availability impact) with network-exposed conditions and low attack compl...

CVE-2022-35053

The CVE-2022-35053 entry describes a heap buffer overflow in OTFCC commit 617837b, exploitable via /release-x64/otfccdump+0x61731f. OTFCC is a Caryll open-source C library/toolset for parsing/writing OpenType font files. The vulnerability originates from a boundary condition when handling untrust...

CVE-2022-35054

OTFCC exposes a heap buffer overflow in commit 617837b via /release-x64/otfccdump+0x6171b2, caused by a boundary error when handling untrusted input. Documented impact is a potential program crash. Public details across sources confirm the vulnerable component and endpoint, but patch/version reme...

CVE-2022-35040

The CVE-2022-35040 entry concerns OTFCC, a C library used to parse OpenType font files. Connected sources confirm a heap buffer overflow affecting the endpoint /release-x64/otfccdump+0x6b5567, attributed to commit 617837b. Publicly cited details indicate this affects OTFCC 0.10.4 and earlier vers...

CVE-2022-35042

The CVE-2022-35042 issue affects the OTFCC project (Caryll OpenType library) and its utilities, specifically the /release-x64/otfccdump+0x4adb11 path. Root cause: a heap buffer overflow caused by a boundary error when processing untrusted input. Impact per sources: can lead to a program crash. Ex...

CVE-2022-35041

CVE-2022-35041 affects the OpenType font toolset OTFCC. The issue is a heap buffer overflow in OTFCC’s /release-x64/otfccdump+0x6b558f triggered by untrusted input, tracked to commit 617837b. Public sources describe a boundary-related overflow in OTFCC 0.10.4 and earlier and indicate potential cr...

CVE-2022-35044

CVE-2022-35044 affects the OTFCC project (Caryll OpenType font utilities). The issue is a heap buffer overflow caused by a boundary error in /release-x64/otfccdump+0x617087 when handling untrusted input. Documented impact is program crashes (availability impact). The CVE has a base score of 6.5 (...

CVE-2022-35047

CVE-2022-35047 refers to a heap buffer overflow in OTFCC, specifically in commit 617837b, triggered by handling input at /release-x64/otfccdump+0x6b05aa. The vulnerability concerns the OTFCC library, used to parse and write OpenType font files, where a boundary error can cause a program crash (av...

CVE-2022-35048

CVE-2022-35048 concerns the OpenType font toolkit OTFCC. The issue is a heap buffer overflow in the release-path handler /release-x64/otfccdump+0x6b0b2c within OTFCC commit 617837b. Public descriptions consistently state a boundary/heap overflow when processing untrusted input, which can cause a ...