Heap-based buffer overflow in opencc - CVE-2025-15536

Vulnerability identifier: #VU122271

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-15536

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error within the opencc::MaxMatchSegmentation() function in src/MaxMatchSegmentation.cpp. A remote attacker can pass specially crafted data to he application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

opencc
Fedora
Ubuntu
openEuler
opencc (Ubuntu package)
opencc
opencc-debuginfo
opencc-debugsource
opencc-devel
opencc-help

Install update from vendor's website.

opencc - update to 1.1.9
opencc (Ubuntu package) - addressed in versions 1.0.4-5ubuntu0.1~esm1, 1.0.5+git20190530-1ubuntu0.1~esm1, 1.1.3+ds1-3ubuntu3.1, 1.1.7+ds1-1ubuntu0.1, 1.1.9+ds1-2ubuntu0.1
opencc - addressed in versions 1.0.5-4.el8, 1.1.9-5.fc43
opencc - addressed in versions 1.1.3-3, 1.1.7-3
opencc-debuginfo - addressed in versions 1.1.3-3, 1.1.7-3
opencc-debugsource - addressed in versions 1.1.3-3, 1.1.7-3
opencc-devel - addressed in versions 1.1.3-3, 1.1.7-3
opencc-help - addressed in versions 1.1.3-3, 1.1.7-3

• https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec
• https://github.com/BYVoid/OpenCC/issues/997
• https://github.com/BYVoid/OpenCC/pull/1005
• https://vuldb.com/?ctiid.341708

• Heap-based buffer overflow in BYVoid OpenCC
• Fedora 43 update for opencc
• Fedora EPEL 8 update for opencc
• openEuler 24.03 LTS SP1 update for opencc
• openEuler 24.03 LTS update for opencc
• openEuler 22.03 LTS SP4 update for opencc
• openEuler 24.03 LTS SP3 update for opencc
• openEuler 24.03 LTS SP2 update for opencc
• Ubuntu update for opencc
• Ubuntu update for opencc