CVE-2022-29777
9.8
CRITICAL · CVSS 3.1 · EPSS 6.9% (pctl 94)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 6.91% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-06-02 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| onlyoffice | core |
| onlyoffice | document server |
References
- https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601
- https://github.com/ONLYOFFICE/core/commit/b17d5e860f30e8be2caeb0022b63be4c76660178
- https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29777
- https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601
- https://github.com/ONLYOFFICE/core/commit/b17d5e860f30e8be2caeb0022b63be4c76660178
- https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29777
→ the Explorer · watch your stack · NVD