CVE-2022-35060

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.81% chance of exploitation in the next 30 days, 54th percentile

Published

2022-09-19

Updated

2025-05-29

Proof-of-concept exploits (2)

• https://drive.google.com/file/d/1VYQgASJR85XpuaakJJxRh_HmAoa61Nce/view?usp=sharing
• Cvjark/Poc/blob/main/otfcc/CVE-2022-35060.md

References

• CVE Record
• NVD entry

Related

• CVE-2022-3506
• CVE-2022-35061
• CVE-2022-35059
• CVE-2022-35062
• CVE-2022-35058
• CVE-2022-35063