Vulnerabilities > Liblouis > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-06-02 | CVE-2022-31783 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace. | 5.5 |
| 2018-09-21 | CVE-2018-17294 | Out-of-bounds Read vulnerability in multiple products The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries. | 4.3 |
| 2018-06-09 | CVE-2018-12085 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. | 6.8 |
| 2018-06-04 | CVE-2018-11685 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. | 6.8 |
| 2018-06-04 | CVE-2018-11684 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. | 6.8 |
| 2018-06-04 | CVE-2018-11683 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. | 6.8 |
| 2018-05-31 | CVE-2018-11577 | Classic Buffer Overflow vulnerability in multiple products Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. | 6.8 |
| 2018-05-25 | CVE-2018-11440 | Out-of-bounds Write vulnerability in multiple products Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c. | 6.8 |
| 2017-08-29 | CVE-2017-13744 | Out-of-bounds Read vulnerability in Liblouis 3.2.0 There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0. | 4.3 |
| 2017-08-29 | CVE-2017-13743 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Liblouis 3.2.0 There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack. | 4.3 |