Search for vulnerabilities
Vulnerability details: VCID-k6fg-djjr-1bc2
Vulnerability ID VCID-k6fg-djjr-1bc2
Aliases CVE-2022-35022
Summary OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.
Status Published
Exploitability 0.5
Weighted Severity 5.9
Risk 3.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00165 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00292 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
epss 0.00447 https://api.first.org/data/v1/epss?cve=CVE-2022-35022
cvssv3.1 6.5 https://drive.google.com/file/d/15eb-k1eDCeVLgb1G9JUSFHmGHHkDc79z/view?usp=sharing
ssvc Track https://drive.google.com/file/d/15eb-k1eDCeVLgb1G9JUSFHmGHHkDc79z/view?usp=sharing
cvssv3.1 6.5 https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35022.md
ssvc Track https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35022.md
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-35022
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://drive.google.com/file/d/15eb-k1eDCeVLgb1G9JUSFHmGHHkDc79z/view?usp=sharing
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:30:42Z/ Found at https://drive.google.com/file/d/15eb-k1eDCeVLgb1G9JUSFHmGHHkDc79z/view?usp=sharing
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35022.md
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-27T15:30:42Z/ Found at https://github.com/Cvjark/Poc/blob/main/otfcc/CVE-2022-35022.md
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-35022
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.32825
EPSS Score 0.00126
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:53:22.416255+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/35xxx/CVE-2022-35022.json 37.0.0