CVE-2021-33481
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...
CVE-2021-33481 is a high vulnerability (CVSS 7.8) in Optical Character Recognition Project Character Recognition, published November 17, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. No source names a fixed version.
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
CVE-2021-33481- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
CVE List No score
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
CVE-2021-33481- Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2021-20184 No score
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
EUVD-2021-20184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wgmm-j5vp-vhxr
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in...
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
GHSA-wgmm-j5vp-vhxr- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
OSV
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
CVE-2021-33481- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-33481
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
DEBIAN-CVE-2021-33481- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-33481
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
- Record
UBUNTU-CVE-2021-33481- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gocrDebian:12 |
All versions, plus listed versions 0.52-60.52-6.10.52-6.1~exp1 |
None known |
gocrDebian:13 |
All versions, plus listed versions 0.52-6.1 |
None known |
gocrDebian:14 |
All versions, plus listed versions 0.52-6.1 |
None known |
gocrUbuntu:16.04:LTS |
All versions, plus listed versions 0.49-2 |
None known |
gocrUbuntu:18.04:LTS |
All versions, plus listed versions 0.49-20.49-2build1 |
None known |
gocrUbuntu:20.04:LTS |
All versions, plus listed versions 0.52-3 |
None known |
gocrUbuntu:22.04:LTS |
All versions, plus listed versions 0.52-3 |
None known |
gocrUbuntu:24.04:LTS |
All versions, plus listed versions 0.52-60.52-6.10.52-6.1build1 |
None known |
gocrUbuntu:25.10 |
All versions, plus listed versions 0.52-6.1build1 |
None known |
gocrUbuntu:26.10 |
All versions, plus listed versions 0.52-6.1build2 |
None known |
gocrUbuntu:26.04:LTS |
All versions, plus listed versions 0.52-6.1build10.52-6.1build2 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=1962865
sourceforge.net/p/jocr/bugs/42
security.gentoo.org/glsa/202401-28
nvd.nist.gov/vuln/detail/CVE-2021-33481
github.com/advisories/GHSA-wgmm-j5vp-vhxr
security-tracker.debian.org/tracker/CVE-2021-33481
ubuntu.com/security/CVE-2021-33481
cve.org/CVERecord?id=CVE-2021-33481