133 matches found
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
DEBIAN-CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
UBUNTU-CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
Design/Logic Flaw
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Summary (CVE-2021-36081) : Tesseract OCR 5.0.0-alpha-20201231 is affected by a one_ell_conflict use-after-free defect occurring during a strpbrk call. The issue is described across multiple sources, with the vulnerability rooted in the use-after-free condition; specific affected versions are limi...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
tesseract 资源管理错误漏洞
tesseract is an open source OCR Optical Character Recognition engine. tesseract OCR has a security vulnerability that stems from the fact that Tesseract OCR has oneellconflict use-after-free during strpbrk calls. no details of the vulnerability are currently available...
OSV-2021-534 Container-overflow in tesseract::ExtractResults16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142 Crash type: Container-overflow WRITE Crash state: tesseract::ExtractResults16 tesseract::PartialMatrixDotVector16 tesseract::matrixDotVector...
npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)
npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: SNYK:JS-NPOSTESSERACT-1051031...
Command Injection
Overview npos-tesseract is an OCR tool for npos using tesseract engine Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 55 in lib/ocr.js. PoC var a = require"npos-tesseract"; a.ocr"& touch JHU ","",function; Remediation There is no fixe...
OSV-2021-211 Heap-use-after-free in __libcpp_strpbrk
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 Crash type: Heap-use-after-free READ 2 Crash state: libcppstrpbrk strpbrk tesseract::Tesseract::oneellconflict...
Command Injection
Overview ntesseract is a simple wrapper for the Tesseract OCR package for node.js Affected versions of this package are vulnerable to Command Injection via lib/tesseract.js. PoC: var a =require"ntesseract"; a.process"& touch JHU ","",function Remediation Upgrade ntesseract to version 0.2.9 or...
PT-2020-6984 · Leptonica +3 · Leptonica +3
Name of the Vulnerable Software and Affected Versions: Leptonica version 1.79.0 Tesseract version 5.0.0 Description: The issue in the Leptonica library is related to a lack of check for division by zero, allowing a remote attacker to cause a Denial of Service DoS using a specially crafted JPEG...
CVE-2011-1136
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file...