CVE-2022-33047
Critical · CVSS 9.8OTFCC — Heap buffer overflow after free (CWE-787)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-787
Description
OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.
Search profile — drives PoC discovery
Symbols otfccbuild.cotfccbuildheap buffer overflowuse after freeotfcc
Keywords CVE-2022-33047OTFCCotfccbuildheap buffer overflowheap overflow after freev0.10.4CWE-787otfcc PoCotfccbuild.c vulnerability
Versions: 0.10.4
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0Cvjark/Poc needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z