← Back

Liblouis

liblouis

Vendor: Liblouis • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Liblouis
1Liblouis
Nov 21, 2024
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.
1Liblouis
1Liblouis
Feb 26, 2025
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
1Liblouis
1Liblouis
Nov 21, 2024
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
2Fedoraproject
Liblouis
2Fedora
Liblouis
Nov 21, 2024
Jun 2, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
3Apple
FedoraprojectLiblouis
7Fedora
IpadosIphone Os+4 more
Nov 21, 2024
Mar 13, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
1Liblouis
1Liblouis
Nov 21, 2024
Aug 2, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use lib...Show more
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.Show less
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
Sep 21, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by...Show more
The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.Show less
2Liblouis
Redhat
6Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Server Aus+3 more
Nov 21, 2024
Jul 27, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
Jun 9, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
Jun 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
May 31, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.
3Canonical
LiblouisOpensuse
3Leap
LiblouisUbuntu Linux
Nov 21, 2024
May 25, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
2Canonical
Liblouis
2Liblouis
Ubuntu Linux
Nov 21, 2024
May 24, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified oth...Show more
An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.Show less
1Liblouis
1Liblouis
May 13, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
1Liblouis
1Liblouis
May 13, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
1Liblouis
1Liblouis
May 13, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack.
1Liblouis
1Liblouis
May 13, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
1Liblouis
1Liblouis
May 13, 2026
Aug 29, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.