CVE-2023-26769
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A buffer overflow vulnerability was found in Liblouis library version 3.24.0. The flaw resides in the resolveSubtable function in compileTranslationTabel.c and can be exploited remotely.
Risk Assessment
An attacker can remotely cause a denial of service (DoS), leading to unavailability of applications using Liblouis.
Recommendation
Update the Liblouis library to the latest available version that includes a fix for CVE-2023-26769.
Other vulnerabilities in Liblouis
See all- CVE-2017-13740High
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c. This may lead to denial of service or possibly unspecified other impact.
- CVE-2017-13739High
Liblouis 3.2.0 has a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write. This issue is triggered in the function resolveSubtable() in compileTranslationTable.c.
- CVE-2017-13738High
There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
Original NVD description (English source)
Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.