13 results · Feed
-
Unscored —
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denia…
-
Unscored —
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
-
Unscored —
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
-
Unscored —
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adapt…
-
Unscored —
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
-
Unscored —
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in…
-
High 7.0
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially …
-
Unscored —
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tm…
-
Unscored —
An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(comm…
-
Unscored —
An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block '/' characters in the …
-
Unscored —
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or h…
-
Unscored —
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input (rootname) …
-
Unscored —
Leptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf or sscanf, which allo…