CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35056

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35049

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5...

CVE-2022-35058

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce...

CVE-2022-35049

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5...

CVE-2022-35051

CVE-2022-35051 affects the OTFCC library and its otfccdump utility. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6b55af, linked to OTFCC 0.10.4 and earlier. Impact described: potential program crash (availability impact) with network-exposed conditions and low attack compl...

CVE-2022-35046

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466...

CVE-2022-35048

CVE-2022-35048 concerns the OpenType font toolkit OTFCC. The issue is a heap buffer overflow in the release-path handler /release-x64/otfccdump+0x6b0b2c within OTFCC commit 617837b. Public descriptions consistently state a boundary/heap overflow when processing untrusted input, which can cause a ...

CVE-2022-35041

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f...

CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

CVE-2022-35059

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414...

CVE-2022-35045

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63...

CVE-2022-35058

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce...

CVE-2022-35055

CVE-2022-35055 affects the OTFCC library. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6c0473, observed in OTFCC commit 617837b (affecting 0.10.4 and earlier). Impact is a possible program crash; no information is provided about code execution or broader system compromise....

PT-2022-22536 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0473 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35052

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1...

CVE-2022-35050

CVE-2022-35050: OTFCC commit 617837b contains a heap buffer overflow in the /release-x64/otfccdump+0x6b04de path. The vulnerability stems from a boundary error when handling untrusted input, potentially leading to a program crash (availability impact). Affected software is OTFCC (Caryll OpenType ...

CVE-2022-35047

CVE-2022-35047 refers to a heap buffer overflow in OTFCC, specifically in commit 617837b, triggered by handling input at /release-x64/otfccdump+0x6b05aa. The vulnerability concerns the OTFCC library, used to parse and write OpenType font files, where a boundary error can cause a program crash (av...