Skip to content
Leptonica vulnerabilities
Newest
-
leptonica, debian linux, tesseract-ocr tesseract ocr +2 more
An issue in the Leptonica linked library (v1.79.0) in Tesseract v5.0.0 allows attackers to cause...
CVE-2022-38266
Fix available
6.5 Medium
-
leptonica, debian linux, fedoraproject fedora +2 more
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in...
CVE-2020-36281
Fix available
7.5 High
-
leptonica, fedoraproject fedora +1 more
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...
CVE-2020-36280
Fix available
7.5 High
-
leptonica, debian linux, fedoraproject fedora +2 more
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to...
CVE-2020-36279
Fix available
7.5 High
-
leptonica, debian linux, fedoraproject fedora +2 more
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
CVE-2020-36278
Fix available
7.5 High
-
leptonica, debian linux, fedoraproject fedora +2 more
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...
CVE-2020-36277
Fix available
7.5 High
-
leptonica
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when...
CVE-2017-18196
Fix available
3.3 Low
-
leptonica
An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block ...
CVE-2018-7442
Fix available
9.1 Critical
-
leptonica
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to...
CVE-2018-7441
Fix available
7.0 High
-
leptonica, debian linux +1 more
An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command...
CVE-2018-7440
Fix available
9.8 Critical
-
leptonica
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3....
CVE-2018-7247
Fix available
9.8 Critical
-
leptonica, debian linux +1 more
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf...
CVE-2018-7186
Fix available
9.8 Critical
-
dan bloomberg leptonica, debian linux +1 more
An exploitable command injection vulnerability exists in the gplotMakeOutput function of...
CVE-2018-3836
Fix available
7.0 High