NVD disclosure day
CVE-2022-33047
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A heap buffer overflow vulnerability exists in the OTFCC font compiler, which could allow an attacker to gain control over a system by processing a malicious font file. This issue could impact the confidentiality, integrity, and availability of a system. It is uncertain if this software is in use within your environmen
CVE-2022-32386
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow vulnerability exists in Tenda AC23 router firmware. If reachable over the network, an attacker could execute arbitrary code, potentially compromising the device and network traffic. The affected technology is the Tenda AC23 router.
CVE-2022-32385
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical stack overflow vulnerability in Tenda AC23 firmware allows for remote arbitrary code execution. This could lead to the compromise of the router's functions and potentially impact devices on the local network if the device is reachable.