CVE-2022-23318

Summary

CVE	CVE-2022-23318
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-02-17 13:15:00 UTC
Updated	2022-02-25 01:06:00 UTC
Description	A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.

Risk And Classification

Problem Types: CWE-787

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Pcf2bdf Project	Pcf2bdf	1.04	All	All	All
Application	Pcf2bdf Project	Pcf2bdf	1.05	All	All	All

References

Reference	Source	Link	Tags
GitHub - ganaware/pcf2bdf	MISC	github.com	Third Party Advisory
Heap-buffer-overflow in pcf2bdf · Issue #4 · ganaware/pcf2bdf · GitHub	MISC	github.com	Exploit, Issue Tracking, Patch, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

182320 Debian Security Update for pcf2bdf (CVE-2022-23318)