CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
CVE-2020-36278- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
CVE-2020-36278- Updated
- 2026-11-02
EUVDEUVD-2020-23821 No score
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
EUVD-2020-23821- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g2hp-mx9f-q582 No score
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
GHSA-g2hp-mx9f-q582- Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
CVE-2020-36278- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
DEBIAN-CVE-2020-36278- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVJLSEC-2026-206
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
JLSEC-2026-206- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVOESA-2021-1327
leptonica security update
The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc.
Security Fix(es):
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.(CVE-2020-36277)
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.(CVE-2020-36278)
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.(CVE-2020-36281)
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.(CVE-2020-36279)
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.(CVE-2020-36280)
- Record
OESA-2021-1327- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
- Record
UBUNTU-CVE-2020-36278- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0290 No score
Updated leptonica packages fix security vulnerabilities
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c (CVE-2020-36277).
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c (CVE-2020-36278).
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c (CVE-2020-36279).
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c (CVE-2020-36280).
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c (CVE-2020-36281).
- Record
MGASA-2021-0290- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
leptonlibDebian:12 |
before 1.79.0-1.1 | 1.79.0-1.1 |
leptonlibDebian:13 |
before 1.79.0-1.1 | 1.79.0-1.1 |
leptonlibDebian:14 |
before 1.79.0-1.1 | 1.79.0-1.1 |
leptonlibDebian:9 From an advisory covering 4 CVEs |
before 1.74.1-1+deb9u1, plus listed versions 1.74.1-1 |
1.74.1-1+deb9u1 |
Leptonica_jllJulia |
before 1.81.1+0 | 1.81.1+0 |
leptonicaMageia:7 From an advisory covering 5 CVEs |
before 1.80.0-1.mga7 | 1.80.0-1.mga7 |
leptonicaopenEuler:20.03-LTS-SP2 From an advisory covering 5 CVEs |
before 1.79.0-2.oe1 | 1.79.0-2.oe1 |
leptonlibUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.69-4ubuntu11.69-4ubuntu21.69-4ubuntu31.69-4ubuntu41.70.1-11.70.1-1ubuntu0.1~esm1 |
None known |
leptonlibUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.72-31.72-3build11.73-11.73-1ubuntu0.1~esm1 |
None known |
leptonlibUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.74.4-11.74.4-21.75.3-11.75.3-21.75.3-31.75.3-3ubuntu0.1~esm1 |
None known |
leptonlibUbuntu:20.04:LTS |
All versions, plus listed versions 1.78.0-21.79.0-1 |
None known |
leptonlibUbuntu:22.04:LTS |
All versions, plus listed versions 1.79.0-1.11.82.0-31.82.0-3build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-36278 is a high vulnerability (CVSS 7.5) in Leptonica, published March 11, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.79%, the 86th percentile. Fixed in leptonlib 1.79.0-1.1.
References
github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0
bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433
lists.debian.org/debian-lts-announce/2021/03/msg00037.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW
Show 17 moreShow less
security.gentoo.org/glsa/202107-53
nvd.nist.gov/vuln/detail/CVE-2020-36278
security-tracker.debian.org/tracker/CVE-2020-36278
advisories.mageia.org/MGASA-2021-0290.html
bugs.mageia.org/show_bug.cgi?id=28994
debian.org/lts/security/2021/dla-2612
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1327
ubuntu.com/security/CVE-2020-36278
cve.org/CVERecord?id=CVE-2020-36278