CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35050

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de...

CVE-2022-35041

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f...

CVE-2022-35056

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35058

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce...

CVE-2022-35054

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2...

CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35049

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5...

CVE-2022-35042

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11...

PT-2022-22536 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0473 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35048

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35042

The CVE-2022-35042 issue affects the OTFCC project (Caryll OpenType library) and its utilities, specifically the /release-x64/otfccdump+0x4adb11 path. Root cause: a heap buffer overflow caused by a boundary error when processing untrusted input. Impact per sources: can lead to a program crash. Ex...

CVE-2022-35041

CVE-2022-35041 affects the OpenType font toolset OTFCC. The issue is a heap buffer overflow in OTFCC’s /release-x64/otfccdump+0x6b558f triggered by untrusted input, tracked to commit 617837b. Public sources describe a boundary-related overflow in OTFCC 0.10.4 and earlier and indicate potential cr...

CVE-2022-35043

CVE-2022-35043 affects OTFCC (the OpenType font parsing library). A heap buffer overflow is triggered in the /release-x64/otfccdump+0x6c08a6 path, reported for commit 617837b. OTFCC 0.10.4 and earlier versions are affected; impact described as a program crash due to the boundary error when proces...

CVE-2022-35045

CVE-2022-35045 concerns the OTFCC library. A heap buffer overflow is triggered by OTFCC commit 617837b via /release-x64/otfccdump+0x6b0d63. The CVE entry notes impact as availability loss (A: High) with no confidentiality/integrity impact. The connected external records corroborate a boundary err...

CVE-2022-35049

CVE-2022-35049 concerns the OTFCC project: commit 617837b introduces a heap buffer overflow in the /release-x64/otfccdump+0x6b03b5 handler when processing untrusted input. The vulnerability impact is described as a crash risk (heap overflow) with a base CVSS v3.1 score of 6.5 (Network attack, no ...

CVE-2022-35050

CVE-2022-35050: OTFCC commit 617837b contains a heap buffer overflow in the /release-x64/otfccdump+0x6b04de path. The vulnerability stems from a boundary error when handling untrusted input, potentially leading to a program crash (availability impact). Affected software is OTFCC (Caryll OpenType ...

CVE-2022-35051

CVE-2022-35051 affects the OTFCC library and its otfccdump utility. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6b55af, linked to OTFCC 0.10.4 and earlier. Impact described: potential program crash (availability impact) with network-exposed conditions and low attack compl...

CVE-2022-35053

The CVE-2022-35053 entry describes a heap buffer overflow in OTFCC commit 617837b, exploitable via /release-x64/otfccdump+0x61731f. OTFCC is a Caryll open-source C library/toolset for parsing/writing OpenType font files. The vulnerability originates from a boundary condition when handling untrust...