CVE-2022-35022

CVE-2022-35022 affects the OTFCC project (OpenType font tools) due to a segmentation fault in the otfccdump binary (commit 617837b) via /release-x64/otfccdump+0x6badae. Connected records confirm the issue as a segmentation violation with CVSSv3.1 base score 6.5 (Availability impact HIGH, no confi...

CVE-2022-35038

CVE-2022-35038 concerns Caryll OTFCC: a heap buffer overflow was found in otfccdump+0x6b064d within OTFCC. The root cause is a boundary error when handling untrusted input, leading to a potential program crash. Affected component is the OTFCC library/utility that parses OpenType font files; exact...

CVE-2022-35030

CVE-2022-35030 concerns Caryll OTFCC, a C library for parsing OpenType fonts. The risk is due to a segmentation violation in otfccdump accessed via /release-x64/otfccdump+0x4fe954, as reported for OTFCC commit 617837b. Documented impact indicates a potential crash (availability impact) while netw...

CVE-2022-35031

CVE-2022-35031 concerns Caryll OTFCC. Affected component: the otfccdump tool (OTFCC commit 617837b) where a segmentation fault occurs at otfccdump+0x703969. This can crash the program, leading to a denial of service as indicated by multiple sources in the connected data. Exploitation is described...

CVE-2022-35024

CVE-2022-35024 affects OTFCC (OpenType font tooling library). A segmentation fault has been observed in commit 617837b when executing code paths involving /multiarch/memmove-vec-unaligned-erms.S. The available connected documents consistently cite a segmentation violation at that location as the ...

CVE-2022-35027

OTFCC (OpenType font tooling) is affected by CVE-2022-35027 via a segmentation fault in /release-x64/otfccdump+0x4fe9a7. The provided documents describe a crash (segmentation violation) as the vulnerability, but do not include specific patch/version details or remediation in the supplied sources.

CVE-2022-35036

The CVE-2022-35036 issue concerns Caryll OTFCC, a C library/tooling for parsing OpenType fonts. The underlying problem is a heap buffer overflow triggered by a boundary condition in /release-x64/otfccdump+0x6e1fc8 when processing untrusted input, as described in multiple sources. The exposure is ...

CVE-2022-35026

CVE-2022-35026 concerns the OTFCC library (OpenType font parsing/writing toolset). The provided records attribute a segmentation violation in the binary release-path otfccdump, triggered at /release-x64/otfccdump+0x4fbc0b, attributed to commit 617837b. The CVSSv3.1 metrics included in the entry i...

CVE-2022-35034

CVE-2022-35034 affects OTFCC (OpenType Font Compiler) and is caused by a heap buffer overflow in the code path related to /release-x64/otfccdump+0x6e7e3d stemming from commit 617837b. The available connected sources (e.g., Red Hat, Debian, OSV/OSV-like entries) confirm the same description withou...

CVE-2022-35028

CVE-2022-35028 affects Caryll OTFCC (OpenType font tooling) due to a segmentation fault in otfccdump at /release-x64/otfccdump+0x4fbbb6. The advisory notes a denial-of-service impact (program crash) with CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, base score 6.5. Affected component is the OTFC...

CVE-2022-35035

The vulnerability CVE-2022-35035 concerns Caryll OTFCC, where a heap buffer overflow is triggered by processing untrusted input in /release-x64/otfccdump+0x6b559f within the OTFCC commit 617837b. The available documents identify the affected component as OTFCC (Caryll OTFCC) and describe a bounda...

CVE-2022-35029

CVE-2022-35029 affects the open-source library OTFCC/Caryll OTFCC . The issue is a segmentation fault causing a crash in the binary at /release-x64/otfccdump+0x6babea . Multiple connected sources (CNVD, CNNVD, OSV, Debian tracker, NVD, etc.) describe a denial-of-service/crash condition originatin...

CVE-2022-35021

Summary: CVE-2022-35021 affects OTFCC’s otfccdump (release-x64) with a global buffer overflow at 0x718693. Public CVSS shows 6.5 (Medium) with network attack vector, no privileges, user interaction required, and high availability impact. Root cause: global buffer overflow in otfccdump+0x718693. A...

CVE-2022-35023

CVE-2022-35023 concerns OTFCC, a C library for parsing/writing OpenType font files. The available documents describe a segmentation violation caused by OTFCC commit 617837b triggering an access fault in /lib/x86_64-linux-gnu/libc.so.6+0xbb384. The CVE entry lists an impact profile: Availability i...

CVE-2022-35032

CVE-2022-35032 affects the OpenType font toolchain project OTFCC. The vulnerability is a segmentation violation in commit 617837b, triggered via /release-x64/otfccdump+0x6b6a8f. Available sources describe an availability impact, but the documents do not provide a vendor patch, remediation steps, ...

CVE-2022-35025

CVE-2022-35025: OTFCC (OpenType Font-related library) contains a segmentation fault in commit 617837b, triggered via /release-x64/otfccdump+0x5266a8. The vulnerability is documented across multiple sources, with CVSS v3.1 base score 6.5 (MEDIUM), attack vector NETWORK, user interaction REQUIRED, ...

CVE-2022-35037

The CVE refers to OTFCC commit 617837b containing a heap buffer overflow in /release-x64/otfccdump+0x6adb1e. This affects Caryll OTFCC (Caryll OpenType font parsing/writing library) when handling untrusted input, with the impact described as a program crash. The provided documents do not specify ...

CVE-2022-35039

CVE-2022-35039 affects the OTFCC project: the vulnerability is a heap buffer overflow in commit 617837b, exposed via /release-x64/otfccdump+0x6e20a0. The issue is documented across multiple sources (Red Hat, Debian, OSV, CVE listings) and is tied to the OTFCC C library used for OpenType font pars...