CVE-2022-35481: 
NixOS vulnerability analysis and mitigation

OTFCC v0.10.4 was discovered to contain a segmentation violation vulnerability via /multiarch/memmove-vec-unaligned-erms.S. The vulnerability was identified and tracked as CVE-2022-35481 (Debian Security).

The vulnerability manifests as a segmentation violation in the memmove-vec-unaligned-erms.S component of OTFCC version 0.10.4. This issue affects multiple versions of the software across different distributions, with varying states of remediation. The vulnerability has been fixed in some releases while remaining active in others, such as being fixed in Debian bullseye but remaining vulnerable in bookworm, trixie, and sid versions (Debian Security).

The vulnerability results in a segmentation violation which could lead to program crashes. While the immediate impact appears to be a denial of service condition, the vulnerability is considered to have low security impact as the affected code is not built in some configurations (Debian Security).

The vulnerability has been addressed in certain distributions, with fixes implemented in specific versions. For instance, it has been fixed in Debian bullseye (2020.20200327.54578-7+deb11u2), while other versions like bookworm, trixie, and sid remain vulnerable (Debian Security).