CVE-2017-13739
HighSummary
Liblouis 3.2.0 has a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write. This issue is triggered in the function resolveSubtable() in compileTranslationTable.c.
Risk Assessment
This vulnerability may lead to denial of service or remote code execution, posing a serious security threat to systems using this library.
Recommendation
It is recommended to upgrade to a newer version of Liblouis that addresses this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Liblouis 3.2.0
See all- CVE-2017-13740High
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c. This may lead to denial of service or possibly unspecified other impact.
- CVE-2017-13738High
There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
- CVE-2023-26769High
A buffer overflow vulnerability was found in Liblouis library version 3.24.0. The flaw resides in the resolveSubtable function in compileTranslationTabel.c and can be exploited remotely.
Original NVD description (English source)
There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution.