deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-34254
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could be abused by an attacker to inject malicious scripts into the vulnerable endpoint. A low privileged attacker could leverage this vulnerability to read local files and to perform Stored XSS. Exploitation of this issue does not require user interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34255
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage this vulnerability to perform an account takeover for a victim. Exploitation of this issue does not require user interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34256
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34257
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34258
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34259
Published: 2022-08-16
Description: Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/magento/apsb22-38.html; https://helpx.adobe.com/security/products/magento/apsb22-38.html
CVE: CVE-2022-34998
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-34999
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-697
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-35000
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-35002
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-35003
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-35004
Published: 2022-08-16
Description: JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/bitbank2/JPEGDEC/issues/41; https://github.com/bitbank2/JPEGDEC/issues/41
CVE: CVE-2022-35007
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35008
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35009
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35010
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35011
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35012
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35013
Published: 2022-08-16
Description: PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/bitbank2/PNGdec/issues/10; https://github.com/bitbank2/PNGdec/issues/10
CVE: CVE-2022-35100
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox at /lib/gfxtools.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/matthiaskramm/swftools/issues/182; https://github.com/matthiaskramm/swftools/issues/182
CVE: CVE-2022-35101
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/182; https://github.com/matthiaskramm/swftools/issues/182
CVE: CVE-2022-35104
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset() at /xpdf/Stream.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/182; https://github.com/matthiaskramm/swftools/issues/182
CVE: CVE-2022-35105
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/183; https://github.com/matthiaskramm/swftools/issues/183
CVE: CVE-2022-35106
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /xpdf/FoFiTrueType.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/matthiaskramm/swftools/issues/182; https://github.com/matthiaskramm/swftools/issues/182
CVE: CVE-2022-35107
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/matthiaskramm/swftools/issues/184; https://github.com/matthiaskramm/swftools/issues/184
CVE: CVE-2022-35108
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/184; https://github.com/matthiaskramm/swftools/issues/184
CVE: CVE-2022-35109
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/184; https://github.com/matthiaskramm/swftools/issues/184
CVE: CVE-2022-35110
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/matthiaskramm/swftools/issues/184; https://github.com/matthiaskramm/swftools/issues/184
CVE: CVE-2022-35111
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/sanitizer_stackdepot.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/matthiaskramm/swftools/issues/184; https://github.com/matthiaskramm/swftools/issues/184
CVE: CVE-2022-35113
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/185; https://github.com/matthiaskramm/swftools/issues/185
CVE: CVE-2022-35114
Published: 2022-08-16
Description: SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/matthiaskramm/swftools/issues/185; https://github.com/matthiaskramm/swftools/issues/185
CVE: CVE-2022-35433
Published: 2022-08-16
Description: ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/rockcarry/ffjpeg/issues/52; https://github.com/rockcarry/ffjpeg/issues/52
CVE: CVE-2022-35434
Published: 2022-08-16
Description: jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-697
References: https://github.com/ilyakurdyukov/jpeg-quantsmooth/issues/25; https://github.com/ilyakurdyukov/jpeg-quantsmooth/issues/25
CVE: CVE-2022-35447
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b04de.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35448
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35449
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0466.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35450
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b84b1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35451
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35452
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35453
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c08a6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35454
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35455
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0d63.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35456
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35458
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35459
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35460
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35461
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35462
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0bc3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35463
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35464
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6171b2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35465
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35466
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35467
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35468
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e420d.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35469
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35470
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x65fc97.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35471
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35472
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35473
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35474
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35475
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35476
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35477
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35478
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35479
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35481
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35482
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35483
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35484
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35485
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-35486
Published: 2022-08-16
Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://cvjark.github.io/2022/07/06/CVE-2022-33047/; https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE: CVE-2022-36139
Published: 2022-08-16
Description: SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/djcsdy/swfmill/issues/56; https://github.com/djcsdy/swfmill/issues/56