CVE-2018-17294

The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a…

published September 21, 2018

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02716 · 85.8th percentile
Published
2018-09-21T06:00Z
EPSS history
Timeline
  • 21 SEP 06:00Z
    The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a…
    cvelistv5