LE
Vendor
Leptonica
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-38266 | LE Leptonica Leptonica | 6.5 | Sep 9 | An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file |
| CVE-2020-36281 | LE Leptonica Leptonica | 7.5 | Mar 12 | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c |
| CVE-2020-36280 | LE Leptonica Leptonica | 7.5 | Mar 12 | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c |
| CVE-2020-36279 | LE Leptonica Leptonica | 7.5 | Mar 12 | Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c |
| CVE-2020-36278 | LE Leptonica Leptonica | 7.5 | Mar 12 | Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c |
| CVE-2020-36277 | LE Leptonica Leptonica | 7.5 | Mar 11 | Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c |
| CVE-2018-3836 | LE Leptonica Leptonica | 7.8 | Apr 24 | An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4 |
| CVE-2018-7442 | LE Leptonica Leptonica | 9.1 | Feb 23 | An issue was discovered in Leptonica through 1.75.3 |
| CVE-2018-7441 | LE Leptonica Leptonica | 7.0 | Feb 23 | Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or… |
| CVE-2018-7440 | LE Leptonica Leptonica | 9.8 | Feb 23 | An issue was discovered in Leptonica through 1.75.3 |
| CVE-2017-18196 | LE Leptonica Leptonica | 3.3 | Feb 23 | Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass… |
| CVE-2018-7247 | LE Leptonica Leptonica | 9.8 | Feb 19 | An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3 |
| CVE-2018-7186 | LE Leptonica Leptonica | 9.8 | Feb 16 | Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allows remote attackers to cause a denial of service… |