CVE-2022-35049

CVE-2022-35049 concerns the OTFCC project: commit 617837b introduces a heap buffer overflow in the /release-x64/otfccdump+0x6b03b5 handler when processing untrusted input. The vulnerability impact is described as a crash risk (heap overflow) with a base CVSS v3.1 score of 6.5 (Network attack, no ...

CVE-2022-35050

CVE-2022-35050: OTFCC commit 617837b contains a heap buffer overflow in the /release-x64/otfccdump+0x6b04de path. The vulnerability stems from a boundary error when handling untrusted input, potentially leading to a program crash (availability impact). Affected software is OTFCC (Caryll OpenType ...

CVE-2022-35052

CVE-2022-35052 concerns OTFCC, a C library and utility for OpenType font files. The affected component is the otfccdump path in OTFCC, where commit 617837b is reported to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1. The public descriptions consistently cite a boundary/heap ...

CVE-2022-35055

CVE-2022-35055 affects the OTFCC library. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6c0473, observed in OTFCC commit 617837b (affecting 0.10.4 and earlier). Impact is a possible program crash; no information is provided about code execution or broader system compromise....

CVE-2022-35056

Summary: CVE-2022-35056 affects the OTFCC library (Caryll open source) used to parse/write OpenType font files. The vulnerability is a heap buffer overflow caused by a boundary error in /release-x64/otfccdump+0x6b0478 when handling untrusted input. The issue can lead to a program crash. What’s in...

CVE-2022-35058

CVE-2022-35058 affects the OTFCC project, where a heap buffer overflow is triggered by handling input on the /release-x64/otfccdump+0x6b05ce endpoint. The root cause is a boundary error in OTFCC’s processing of untrusted input, leading to a potential crash. Public references consistently cite the...

CVE-2022-35040

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567...

PT-2022-22539 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0414 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35056

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35049

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5...

CVE-2022-35050

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de...

CVE-2022-35047

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa...

PT-2022-22527 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6b05aa endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35058

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce...

CVE-2022-35041

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f...

PT-2022-22520 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b5567 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

PT-2022-22523 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6c08a6 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35040

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567...

CVE-2022-35042

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11...

PT-2022-22528 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6b0b2c endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...