Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2021-12885 CVE-2021-33481 · GHSA-wgmm-j5vp-vhxr

Memory corruption in gocr

Priority LOW 37

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01222 Published 2021-11-17 No fix listed CWE-119
TI-2021-12883 CVE-2021-33479 · GHSA-cfqc-x96c-8xxg

Memory corruption in gocr

Priority LOW 39

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01222 Published 2021-11-17 No fix listed CWE-119
Priority MEDIUM 48

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-b…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03377 Published 2005-04-16 No fix listed CWE-190