CVE-2022-33047

CriticalCVSS 9.8

Published: 06/07/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.06%

60th percentile - higher than 60% of all known CVEs

Summary

A heap buffer overflow after free (use-after-free) vulnerability was discovered in OTFCC v0.10.4 in the otfccbuild.c file. This flaw could lead to program crashes or potential arbitrary code execution.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code in the context of the OTFCC process, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to immediately update OTFCC to the latest available version that includes a fix for this vulnerability. If an update is not possible, restrict access to applications using OTFCC.

Original NVD description (English source)

OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.