OTFCC code issue vulnerability

OTFCC is Caryll open source a C library and utilities. It is used to parse and write OpenType font files. OTFCC version 0.10.4 contains a code issue vulnerability that stems from a lack of proper validation of user-supplied data in the /x8664-linux-gnu/libc.so.6 0xbb384 file, which can be exploit...

Input validation

OTFCC v0.10.4 was discovered to contain a segmentation violation via /x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2022-35469

OTFCC v0.10.4 was discovered to contain a segmentation violation via /x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2022-35469

OTFCC v0.10.4 was discovered to contain a segmentation violation via /x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2022-35469

OTFCC v0.10.4 was discovered to contain a segmentation violation via /x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2021-46503

Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x8664-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46522

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0xaff53...

CVE-2021-46503

CVE-2021-46503 affects Jsish v3.5.0 and is described as a heap-use-after-free vulnerability that can cause a Denial of Service (DoS). The issue is reported in the context of Jsish’s C implementation; no exploit details or attack vectors are provided in the linked documents. Connected sources cons...

CVE-2021-46503

Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x8664-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46487

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12733

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability that can be triggered via the /lib/x86 64-linux-gnu/libc.so.6+0x18e506 endpoint, potentially leading to a Denial of Service DoS. Recommendations For Jsish version...

PT-2022-12788

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability that can be triggered via /lib/x86 64-linux-gnu/libc.so.6+0x4b44b, leading to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the...

PT-2022-12748

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap-use-after-free issue was discovered in Jsish, which can lead to a Denial of Service DoS. The issue is related to the /usr/lib/x86 64-linux-gnu/libasan.so.4+0x79732 endpoint. Recommendations For Jsish...