Description
Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libthai | 0.1.13-1 | — |
| Debian 13 | libthai | 0.1.13-1 | — |
| Debian 12 | libthai | 0.1.13-1 | — |
| Debian 5.0 | libthai | 0.1.9-4+lenny1 | DSA-1971-1 |
| Debian 4.0 | libthai | 0.1.6-1+etch1 | DSA-1971-1 |
Advisories 1
- DSA-1971-1 libthai - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- 38213 third-party-advisory
- 38235 third-party-advisory
- DSA-1971 vendor-advisory
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.6-1+etch1.diff.gz
- USN-887-1 vendor-advisory
- http://linux.thai.net/svn/software/libthai/tags/r_0_1_13/ChangeLog
- 38196 third-party-advisory
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.9-4+lenny1.diff.gz
- SUSE-SR:2010:002 vendor-advisory
- http://linux.thai.net/node/184
- 37822 vdb-entry
- 38420 third-party-advisory