Every CVE Search/ Get API key

CVE-2022-35043

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...

6.5 Medium

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.95%Up 0.1 points since Oct 15, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
CVE-2022-35043
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 6.5

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
CVE-2022-35043
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2022-37941 6.5

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
EUVD-2022-37941
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-r699-jvpq-65p6 6.5

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
GHSA-r699-jvpq-65p6
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 6.5

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
CVE-2022-35043
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-35043 No score

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.

Record
DEBIAN-CVE-2022-35043
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
texlive-bin
Debian:12
 All versions, plus listed versions
2022.20220321.62855-5.12022.20220321.62855-5.1+deb12u12022.20220321.62855-5.1+deb12u22022.20220321.62855-62022.20220321.62855-7
Show 27 moreShow less
2022.20220321.62855-82023.20230311.66589-12023.20230311.66589-22023.20230311.66589-32023.20230311.66589-42023.20230311.66589-52023.20230311.66589-62023.20230311.66589-72023.20230311.66589-82023.20230311.66589-92024.20240313.70630+ds-12024.20240313.70630+ds-22024.20240313.70630+ds-32024.20240313.70630+ds-42024.20240313.70630+ds-52024.20240313.70630+ds-62025.20250727.75242+ds-12025.20250727.75242+ds-22025.20250727.75242+ds-32025.20250727.75242+ds-42025.20250727.75242+ds-52025.20250727.75242+ds-5~hurd.12026.20260303.78225+ds-12026.20260303.78225+ds-22026.20260303.78225+ds-32026.20260303.78225+ds-42026.20260303.78225+ds-5
 None known
texlive-bin
Debian:13
 All versions, plus listed versions
2024.20240313.70630+ds-62025.20250727.75242+ds-12025.20250727.75242+ds-22025.20250727.75242+ds-32025.20250727.75242+ds-4
Show 7 moreShow less
2025.20250727.75242+ds-52025.20250727.75242+ds-5~hurd.12026.20260303.78225+ds-12026.20260303.78225+ds-22026.20260303.78225+ds-32026.20260303.78225+ds-42026.20260303.78225+ds-5
 None known
texlive-bin
Debian:14
 All versions, plus listed versions
2024.20240313.70630+ds-62025.20250727.75242+ds-12025.20250727.75242+ds-22025.20250727.75242+ds-32025.20250727.75242+ds-4
Show 7 moreShow less
2025.20250727.75242+ds-52025.20250727.75242+ds-5~hurd.12026.20260303.78225+ds-12026.20260303.78225+ds-22026.20260303.78225+ds-32026.20260303.78225+ds-42026.20260303.78225+ds-5
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-35043 is a medium vulnerability (CVSS 6.5) in Otfcc Project Otfcc, published October 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open