TI-2023-11763 Aliases CVE-2023-26769 GHSA-rvg4-44mx-vhr7

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote…

MEDIUM 41CWE-120Published 2023-03-16 · Updated 2026-07-09

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Partial Red Hat: 1 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01157 67th percentileScored 2026-11-07

Fix Partial Red Hat: 1 advisoryRed Hat: 1 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:liblouis:liblouis:3.24.0:::::::*	3.24.0	Vulnerable	Liblouis

cpe:2.3:a:liblouis:liblouis:3.24.0:*:*:*:*:*:*:* Versions 3.24.0 Vulnerable ·Liblouis

Remediation

Red Hat 1 advisory

RHSA-2023:6385 Released 2023-11-07 · Red Hat rating Moderate
liblouis security update
- Red Hat Enterprise Linux AppStream (v. 9) liblouis-3.16.1-5.el9, python3-louis-3.16.1-5.el9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 7	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 8	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 9)	Fixed	RHSA-2023:6385

Timeline

2026-10-02 Threatist record created from CVE-2023-26769
2026-10-03 Alias added: GHSA-rvg4-44mx-vhr7

References

Patch 1

https://github.com/liblouis/liblouis/pull/1300

Other 1

https://github.com/liblouis/liblouis

TI-2023-11762 Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to… CVSS 3.1HIGH 7.5
TI-2018-08139 An issue was discovered in Liblouis 3.5.0. CVSS 3.0CRITICAL 9.8
TI-2017-11075 Stack-based buffer overflow in liblouis CVSS 3.0CRITICAL 9.8
TI-2018-08166 Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c. CVSS 3.0HIGH 8.8
TI-2018-08283 Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. CVSS 3.0HIGH 8.8
TI-2023-11761 Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to… CVSS 3.1HIGH 7.5

See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences