Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ONLYOFFICE/core

              master @ 3250a84
            

Fixes

CVEs

CRITICAL

Peak severity

27.0%

Coverage

Highlights

Memory Corruption: 21 prior fixes. Scrutinize any change in this area.

DesktopEditor/common/File.cpp: most-fixed (5 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Memory Corruption: This component contains recurring buffer overflow and character encoding offset calculation vulnerabilities (notably CVE-2022-29776), posing severe risks of denial of service or arbitrary code execution through crafted user documents.

Heap Buffer Overflow: Insecure handling of font parsing headers and font glyph conversion is a critical vector for heap corruption and potential code execution (CVE-2022-29777).

XML Injection: The RTF rendering component repeatedly writes unescaped user-controlled metadata values (e.g., font names and document properties) directly into OOXML formats, leading to structural document corruption or XML injection.