Known vulnerabilities in Leptonica

Known vulnerabilities in Leptonica

Vendor: DanBloomberg

Software: Leptonica

Software CPE: cpe:2.3:a:danbloomberg:leptonica:*:*:*:*:*:*:*:*

Website: https://github.com/DanBloomberg

Total vulnerabilities: 13

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84721 - Divide By Zero CVE-2022-38266	CWE-369	Medium	No	No	1.81.0	22.12.2023	SB2022090934 SB2023122236 SB2023030402
#VU55310 - Out-of-bounds read CVE-2020-36281	CWE-125	Medium	No	No	1.80.0	26.07.2021	SB2021031123 SB2021072612 SB2021082802 and 2 more
#VU55309 - Out-of-bounds read CVE-2020-36280	CWE-125	Medium	No	No	1.80.0	26.07.2021	SB2021031123 SB2021072612 SB2021082802 and 2 more
#VU55308 - Out-of-bounds read CVE-2020-36279	CWE-125	Medium	No	No	1.80.0	26.07.2021	SB2021031123 SB2021072612 SB2021082802 and 2 more
#VU55307 - Out-of-bounds read CVE-2020-36278	CWE-125	Medium	No	No	1.80.0	26.07.2021	SB2021031123 SB2021072612 SB2021082802 and 2 more
#VU55306 - Always-Incorrect Control Flow Implementation CVE-2020-36277	CWE-670	Medium	No	No	1.80.0	26.07.2021	SB2021031123 SB2021072612 SB2021082802 and 2 more
#VU11225 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-7441	CWE-362	Low	No	No	1.76.0	22.03.2018	SB2018022316 SB2023122236 SB2018121917 and 1 more
#VU11189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-7442	CWE-22	Low	No	No	1.76.0	21.03.2018	SB2018022316 SB2023122236 SB2018050721 and 2 more
#VU11188 - Command injection CVE-2018-7440	CWE-77	High	No	No	-	21.03.2018	SB2018020615 SB2023122236 SB2018050721
#VU11187 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-18196	CWE-22	Low	No	No	1.76.0	21.03.2018	SB2018022316 SB2023122236 SB2018022726 and 1 more
#VU11176 - Buffer overflow CVE-2018-7247	CWE-120	High	No	No	-	20.03.2018	SB2018021910 SB2023122236 SB2018022244 and 3 more
#VU11175 - Stack-based buffer overflow CVE-2018-7186	CWE-121	Low	No	No	-	20.03.2018	SB2018021910 SB2023122236 SB2018022244 and 3 more
#VU10359 - Command injection CVE-2018-3836	CWE-77	Low	No	No	-	02.02.2018	SB2018012207 SB2018021411 SB2018022244 and 4 more