CVE-2022-35065

CVE-2022-35065 affects the OTFCC project (OpenType font tooling). The issue is a segmentation violation in /release-x64/otfccdump+0x65f724, indicating a fault in that path to process data. The CVSS metrics indicate an attacker-facing scenario with Network access, low complexity, no privileges, us...

CVE-2022-35065

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...

CVE-2022-35065

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...

CVE-2022-35065

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...

CVE-2022-35064

CVE-2022-35064 involves a heap buffer overflow in OTFCC’s otfccdump (release-x64) via 0x4adcdb, triggered during handling of untrusted input in __asan_memset. The vulnerability can cause a program crash. The provided documents identify the affected component and root cause but do not specify a pa...

CVE-2022-35064

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in asanmemset...

CVE-2022-35064

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in asanmemset...

CVE-2022-35064

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in asanmemset...

CVE-2022-35063

CVE-2022-35063: OTFCC contains a heap buffer overflow in /release-x64/otfccdump+0x6e41a8 when handling untrusted input. Affected software/component: OTFCC (OpenType font tooling library). Root cause: heap overflow in otfccdump code path. Impact: potential crash; CVSS v3.1 base score 6.5 (Medium);...

CVE-2022-35063

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8...

CVE-2022-35063

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8...

CVE-2022-35063

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8...

CVE-2022-35062

CVE-2022-35062 concerns the OTFCC library. A heap buffer overflow is reported in /release-x64/otfccdump+0x6c0bc3 when handling untrusted input, potentially causing a crash. The available data confirm the affected component and the vulnerability class, with CVSS metrics indicating a Medium severit...

CVE-2022-35062

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3...

CVE-2022-35062

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3...

CVE-2022-35062

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3...

CVE-2022-35061

CVE-2022-35061 concerns OTFCC (OpenType font handling library) and the otfccdump tool. The issue is described as a heap buffer overflow triggered by processing input in /release-x64/otfccdump at 0x6e412a. Reported across multiple feeds (NVD, CNVD, OSV, Debian tracker, CNVD) with the same vulnerab...

CVE-2022-35061

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a...

CVE-2022-35061

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a...

CVE-2022-35061

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a...