Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Leptonica: Heap Buffer Over-Read in findNextBorderPixel

CVE-2020-36278 · published 5 years ago
Summary

A security issue has been found in Leptonica, a library used for image processing. This issue could allow an attacker to potentially crash the application or execute malicious code. If you are using Leptonica, we recommend updating to version 1.80.0 or later to fix the issue.

What to do
  • Update leptonica leptonica to version 1.80.0 or later.
Affected software
VendorProductAffected versions
leptonica leptonica < 1.80.0
cpe:2.3:a:leptonica:leptonica:*:*:*:*:*:*:*:*
fedoraproject fedora 32
33
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
debian debian_linux 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Original advisory text
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published12 Mar 2021
Updated31 Oct 2026
First seen11 Apr 2026
Sources
CVE-2020-36278 · OSV
CVE-2020-36278 · NVD
Track software like this
Free during beta