CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

CVE-2022-35052

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1...

CVE-2022-35050

CVE-2022-35050: OTFCC commit 617837b contains a heap buffer overflow in the /release-x64/otfccdump+0x6b04de path. The vulnerability stems from a boundary error when handling untrusted input, potentially leading to a program crash (availability impact). Affected software is OTFCC (Caryll OpenType ...

CVE-2022-35047

CVE-2022-35047 refers to a heap buffer overflow in OTFCC, specifically in commit 617837b, triggered by handling input at /release-x64/otfccdump+0x6b05aa. The vulnerability concerns the OTFCC library, used to parse and write OpenType font files, where a boundary error can cause a program crash (av...

CVE-2022-35055

CVE-2022-35055 affects the OTFCC library. The root cause is a heap buffer overflow in /release-x64/otfccdump+0x6c0473, observed in OTFCC commit 617837b (affecting 0.10.4 and earlier). Impact is a possible program crash; no information is provided about code execution or broader system compromise....

CVE-2022-35049

CVE-2022-35049 concerns the OTFCC project: commit 617837b introduces a heap buffer overflow in the /release-x64/otfccdump+0x6b03b5 handler when processing untrusted input. The vulnerability impact is described as a crash risk (heap overflow) with a base CVSS v3.1 score of 6.5 (Network attack, no ...

PT-2022-22534 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x61731f endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35044

CVE-2022-35044 affects the OTFCC project (Caryll OpenType font utilities). The issue is a heap buffer overflow caused by a boundary error in /release-x64/otfccdump+0x617087 when handling untrusted input. Documented impact is program crashes (availability impact). The CVE has a base score of 6.5 (...

CVE-2022-35052

CVE-2022-35052 concerns OTFCC, a C library and utility for OpenType font files. The affected component is the otfccdump path in OTFCC, where commit 617837b is reported to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1. The public descriptions consistently cite a boundary/heap ...

PT-2022-22535 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6171b2 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35046

CVE-2022-35046 affects OTFCC, specifically the otfccdump+0x6b0466 path, where a boundary/heap buffer overflow can be triggered by untrusted input, potentially crashing the program. The CVSS data in the records indicates network access with low attack complexity and user interaction required, caus...

CVE-2022-35059

CVE-2022-35059 involves a heap/buffer overflow in the OTFCC library routine at /release-x64/otfccdump+0x6c0414. Affected are OTFCC versions 0.10.4 and earlier (likely through 0.10.x prior to fixed release). The underlying cause is a boundary error when processing untrusted input, enabling a crash...

CVE-2022-35050

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de...

CVE-2022-35051

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af...

CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6...

CVE-2022-35054

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2...

CVE-2022-35056

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478...

CVE-2022-35059

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414...

CVE-2022-35045

CVE-2022-35045 concerns the OTFCC library. A heap buffer overflow is triggered by OTFCC commit 617837b via /release-x64/otfccdump+0x6b0d63. The CVE entry notes impact as availability loss (A: High) with no confidentiality/integrity impact. The connected external records corroborate a boundary err...

CVE-2022-35059

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414...