{"id":"CVE-2020-36280","aliases":["DEBIAN-CVE-2020-36280","EUVD-2020-23823","GHSA-rgpm-6p39-f6wx","JLSEC-2026-208","MGASA-2021-0290","OESA-2021-1327","UBUNTU-CVE-2020-36280"],"status":"published","title":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02356,"percentile":0.83862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2021-03-12T00:00:24Z","modified":"2026-10-26T12:02:24Z","fixes":[{"ecosystem":"Debian:12","package":"leptonlib","fixed_in":["1.79.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"leptonlib","fixed_in":["1.79.0-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"leptonlib","fixed_in":["1.79.0-1.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Leptonica_jll","fixed_in":["1.81.1+0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0-1.1"}]}]},{"source":"osv","ecosystem":"Julia","package":"Leptonica_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.81.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"leptonica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.80.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"leptonica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.79.0-2.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.69-4ubuntu1","1.69-4ubuntu2","1.69-4ubuntu3","1.69-4ubuntu4","1.70.1-1","1.70.1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.72-3","1.72-3build1","1.73-1","1.73-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.74.4-1","1.74.4-2","1.75.3-1","1.75.3-2","1.75.3-3","1.75.3-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.78.0-2","1.79.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"leptonlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.79.0-1.1","1.82.0-3","1.82.0-3build1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"leptonica","product":"leptonica"}],"references":[{"url":"https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0","tags":["x_refsource_MISC","x_transferred","Patch","Release Notes","Third Party Advisory","fix","web","report"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23654","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://github.com/DanBloomberg/leptonica/commit/5ba34b1fe741d69d43a6c8cf767756997eadd87c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202107-53","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36280","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/"},{"url":"https://github.com/advisories/GHSA-rgpm-6p39-f6wx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-36280","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0290.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28994","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2021/dla-2612","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36277","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36278","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36279","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-36280","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36280","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-36280","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:00:24Z","modified":"2024-08-04T17:23:10.31Z","updated_at":"2026-11-02T14:35:55.128961Z"}],"euvd":[{"id":"EUVD-2020-23823","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:00:24Z","modified":"2024-08-04T17:23:10Z","updated_at":"2026-11-03T03:07:03.484914Z"}],"ghsa":[{"id":"GHSA-rgpm-6p39-f6wx","title":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2022-05-24T17:44:27Z","modified":"2023-01-29T05:05:38Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:45:50.403728Z"}],"nvd":[{"id":"CVE-2020-36280","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:15:12.787Z","modified":"2026-06-17T03:15:14.407Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"CVE-2020-36280","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:15:12.787Z","modified":"2026-10-20T13:59:38.308068331Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"DEBIAN-CVE-2020-36280","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:15:12.787Z","modified":"2026-10-26T12:02:24.320093771Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"JLSEC-2026-208","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2026-04-27T14:03:22.624Z","modified":"2026-07-18T00:00:34.778298988Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1327","title":"leptonica security update","description":"The library supports many operations that are useful on  * Document images  * Natural images Fundamental image processing and image analysis operations  * Rasterop (aka bitblt)  * Affine transforms (scaling, translation, rotation, shear)    on images of arbitrary pixel depth  * Projective and bi-linear transforms  * Binary and gray scale morphology, rank order filters, and    convolution  * Seed-fill and connected components  * Image transformations with changes in pixel depth, both at    the same scale and with scale change  * Pixelwise masking, blending, enhancement, arithmetic ops,    etc.\r\n\r\nSecurity Fix(es):\r\n\r\nLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.(CVE-2020-36277)\r\n\r\nLeptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.(CVE-2020-36278)\r\n\r\nLeptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.(CVE-2020-36281)\r\n\r\nLeptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.(CVE-2020-36279)\r\n\r\nLeptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.(CVE-2020-36280)","status":"published","published":"2021-08-28T11:04:34Z","modified":"2026-08-18T01:15:56.743367232Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2020-36280","description":"Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.","status":"published","published":"2021-03-12T00:15:00Z","modified":"2026-04-22T12:40:57.39168Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"MGASA-2021-0290","title":"Updated leptonica packages fix security vulnerabilities","description":"Leptonica before 1.80.0 allows a denial of service (application crash) via an\nincorrect left shift in pixConvert2To8 in pixconv.c (CVE-2020-36277).\n\nLeptonica before 1.80.0 allows a heap-based buffer over-read in\nfindNextBorderPixel in ccbord.c (CVE-2020-36278).\n\nLeptonica before 1.80.0 allows a heap-based buffer over-read in\nrasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c (CVE-2020-36279).\n\nLeptonica before 1.80.0 allows a heap-based buffer over-read in\npixReadFromTiffStream, related to tiffio.c (CVE-2020-36280).\n\nLeptonica before 1.80.0 allows a heap-based buffer over-read in\npixFewColorsOctcubeQuantMixed in colorquant1.c (CVE-2020-36281).\n","status":"published","published":"2021-06-28T21:16:35Z","modified":"2026-04-16T04:43:43.734977737Z","updated_at":"2026-11-02T15:49:41.509337Z"}]}}