TI-2018-05365 CVE-2018-7440 · GHSA-x83x-c4xw-rr5g
An issue was discovered in Leptonica through 1.75.3.
Priority MEDIUM 48
An issue was discovered in Leptonica through 1.75.3.
Leptonica
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Leptonica records in CISA KEVNo Leptonica vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Leptonica · all components
TI-2018-05207 CVE-2018-7186 · GHSA-hx3c-v527-xcjq
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument…
Priority MEDIUM 48
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspe…
TI-2018-05256 CVE-2018-7247 · GHSA-29q2-994c-m8hr
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3.
Priority MEDIUM 47
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3.
TI-2018-05367 CVE-2018-7442 · GHSA-fmvw-q9g6-wfgh
An issue was discovered in Leptonica through 1.75.3.
Priority MEDIUM 43
An issue was discovered in Leptonica through 1.75.3.
TI-2020-18579 CVE-2020-36281 · GHSA-6mxw-48pj-x2r9
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
Priority LOW 38
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
TI-2020-18577 CVE-2020-36279 · GHSA-f6cq-qff8-2wfw
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow…
Priority LOW 38
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
TI-2020-18576 CVE-2020-36278 · GHSA-g2hp-mx9f-q582
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Priority LOW 38
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
TI-2020-18578 CVE-2020-36280 · GHSA-rgpm-6p39-f6wx
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
Priority LOW 37
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
TI-2020-18575 CVE-2020-36277 · GHSA-5h62-2v5q-2mpg
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect…
Priority LOW 37
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.
TI-2018-02806 CVE-2018-3836 · GHSA-jv24-gr2j-qp4r
OS command injection in Dan Bloomberg Leptonica
Priority LOW 37
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4.
TI-2022-17932 CVE-2022-38266 · GHSA-xgw2-h7jv-85pm
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an…
Priority LOW 32
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
TI-2018-05366 CVE-2018-7441 · GHSA-ffph-9q4q-c343
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to…
Priority LOW 30
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrate…
TI-2017-13381 CVE-2017-18196 · GHSA-m7cf-9jqx-8xrq
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components)…
Priority LOW 16
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging ac…