Skip to content
OpenAdvisories

Package · npm

opencc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    GHSA-7fqq-q52p-2jjg

    OpenCC has an Out-of-bounds read when processing truncated UTF-8 input

    ### Summary OpenCC versions before 1.2.0 contain two `CWE-125: Out-of-bounds Read` issues caused by length validation failures in UTF-8 processing. When handling malformed or truncated UTF-8 input, OpenCC trusted derived length values without enforcing the in…

    opencc opencc npm PyPI
  • Medium 5.3
    CVE-2025-15536

    BYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflow

    A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local …

    BYVoid OpenCC opencc opencc Debian Ubuntu Alpine npm
  • Medium 5.5
    CVE-2018-16982

    Open Chinese Convert subject to Denial of Service via Out-of-bounds Read

    Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.

    opencc opencc Ubuntu npm