Login Request a demo
LE
Product
Leptonica
by Leptonica · last CVE Sep 9, 2022
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 4High 7Medium 1Low 1
Severity
All severities13Critical4High7Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Leptonica to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7440
9.8
4%
Feb 23
An issue was discovered in Leptonica through 1.75.3
Affected: through 1.75.3
CVE-2018-7247
9.8
2%
Feb 19
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3
Affected: before 1.75.3
CVE-2018-7186
9.8
3%
Feb 16
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service…
Affected: before 1.75.3
CVE-2018-7442
9.1
2%
Feb 23
An issue was discovered in Leptonica through 1.75.3
Affected: through 1.75.3
CVE-2018-3836
7.8
1%
Apr 24
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4
Affected: 1.74.4
CVE-2020-36281
7.5
3%
Mar 12
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c
Affected: before 1.80.0
CVE-2020-36280
7.5
2%
Mar 12
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c
Affected: before 1.80.0
CVE-2020-36279
7.5
3%
Mar 12
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c
Affected: before 1.80.0
CVE-2020-36278
7.5
3%
Mar 12
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c
Affected: before 1.80.0
CVE-2020-36277
7.5
2%
Mar 11
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c
Affected: before 1.80.0
CVE-2018-7441
7.0
0%
Feb 23
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or…
Affected: through 1.75.3
CVE-2022-38266
6.5
1%
Sep 9
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file
Affected: before 1.80.0
CVE-2017-18196
3.3
0%
Feb 23
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass…
Affected: 1.74.4
Showing 13