357 matches found
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081
Summary (CVE-2021-36081) : Tesseract OCR 5.0.0-alpha-20201231 is affected by a one_ell_conflict use-after-free defect occurring during a strpbrk call. The issue is described across multiple sources, with the vulnerability rooted in the use-after-free condition; specific affected versions are limi...
CVE-2021-36081
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
CVE-2021-36081: Use After Free
Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...
tesseract 资源管理错误漏洞
tesseract is an open source OCR Optical Character Recognition engine. tesseract OCR has a security vulnerability that stems from the fact that Tesseract OCR has oneellconflict use-after-free during strpbrk calls. no details of the vulnerability are currently available...
PT-2021-21105
Name of the Vulnerable Software and Affected Versions: Tesseract OCR version 5.0.0-alpha-20201231 Description: The issue is related to a use-after-free error during a strpbrk call, specifically due to a one ell conflict. Recommendations: For Tesseract OCR version 5.0.0-alpha-20201231, at the...
OSV-2021-534 Container-overflow in tesseract::ExtractResults16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142 Crash type: Container-overflow WRITE Crash state: tesseract::ExtractResults16 tesseract::PartialMatrixDotVector16 tesseract::matrixDotVector...
PT-2021-28160
Name of the Vulnerable Software and Affected Versions: Tesseract affected versions not specified Description: The issue is related to a crash type of Container-overflow WRITE. The crash state involves functions such as tesseract::ExtractResults16, tesseract::PartialMatrixDotVector16, and...
tesseract-ocr:fuzzer-api: Container-overflow in tesseract::ExtractResults16
Detailed Report: https://oss-fuzz.com/testcase?key=4759298367422464 Project: tesseract-ocr Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-api Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x62100048d47f Crash State:...
tesseract-ocr:fuzzer-api-512x256: Heap-use-after-free in __libcpp_strpbrk
Detailed Report: https://oss-fuzz.com/testcase?key=5731301346902016 Project: tesseract-ocr Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-api-512x256 Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6040001692d0 Crash State:...
tesseract-ocr:fuzzer-api-512x256: Heap-use-after-free in tesseract::Tesseract::one_ell_conflict
Detailed Report: https://oss-fuzz.com/testcase?key=6128267700600832 Project: tesseract-ocr Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-api-512x256 Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6040001692d0 Crash State:...
npos-cli (>=0.0.5, <=0.0.6) potentially affected by CVE-2020-28453 via npos-tesseract (0.0.3)
npos-tesseract NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on npos-tesseract and may be impacted: - npos-cli =0.0.5, =0.0.6 Source cves: CVE-2020-28453 Source advisory: SNYK:JS-NPOSTESSERACT-1051031...
Command Injection
Overview npos-tesseract is an OCR tool for npos using tesseract engine Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 55 in lib/ocr.js. PoC var a = require"npos-tesseract"; a.ocr"& touch JHU ","",function; Remediation There is no fixe...
OSV-2021-211 Heap-use-after-free in __libcpp_strpbrk
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 Crash type: Heap-use-after-free READ 2 Crash state: libcppstrpbrk strpbrk tesseract::Tesseract::oneellconflict...
PT-2021-28011
Name of the Vulnerable Software and Affected Versions Tesseract affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the strpbrk function,...
tesseract-ocr:fuzzer-api-512x256: Heap-use-after-free in __libcpp_strpbrk
Detailed Report: https://oss-fuzz.com/testcase?key=4656898932604928 Project: tesseract-ocr Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-api-512x256 Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60400027d390 Crash State:...
Command Injection
Overview ntesseract is a simple wrapper for the Tesseract OCR package for node.js Affected versions of this package are vulnerable to Command Injection via lib/tesseract.js. PoC: var a =require"ntesseract"; a.process"& touch JHU ","",function Remediation Upgrade ntesseract to version 0.2.9 or...
PT-2020-6984
Name of the Vulnerable Software and Affected Versions Leptonica version 1.79.0 Tesseract version 5.0.0 Description The issue in the Leptonica library is related to a lack of check for division by zero, allowing a remote attacker to cause a Denial of Service DoS using a specially crafted JPEG file...
