Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-35060 EUVD-2022-37958GHSA-8q89-45qr-6mvq

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.

Published Sep 19, 2022 · Updated May 29, 2025 · Assigned by mitre

Description

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 texlive-bin No fix yet —
Debian 13 texlive-bin No fix yet —
Debian 12 texlive-bin No fix yet —

References