tifig v0.2.2 was discovered to contain a heap-buffer overflow via _asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-36150.json"