CVE-2022-35045
CVE-2022-35045
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63.
CVSS 6.5 · Medium · EPSS 0.9%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
texlive-bin Debian:12
- Versions
- 2022.20220321.62855-5.1
- 2022.20220321.62855-5.1+deb12u1
- 2022.20220321.62855-5.1+deb12u2
- 2022.20220321.62855-6
- 2022.20220321.62855-7
- 2022.20220321.62855-8
- 2023.20230311.66589-1
- 2023.20230311.66589-2
- 2023.20230311.66589-3
- 2023.20230311.66589-4
- 2023.20230311.66589-5
- 2023.20230311.66589-6
- 2023.20230311.66589-7
- 2023.20230311.66589-8
- 2023.20230311.66589-9
- 2024.20240313.70630+ds-1
- 2024.20240313.70630+ds-2
- 2024.20240313.70630+ds-3
- 2024.20240313.70630+ds-4
- 2024.20240313.70630+ds-5
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:13
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:14
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published