Vendors / Optical Character Recognition Project Optical Character Recognition Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Optical Character Recognition Project records in CISA KEV No Optical Character Recognition Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-b…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03377 · Published 2005-04-16 · No fix listed CWE-190
Priority LOW 39
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01222 · Published 2021-11-17 · No fix listed CWE-119
Priority LOW 37
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01222 · Published 2021-11-17 · No fix listed CWE-119
Priority LOW 27
An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01076 · Published 2021-11-17 · No fix listed CWE-416
Open these records in search → All records by CVSS severity
1 2 1 0 0
