CVE-2021-36081CWE-416

CVE-2021-36081

High · published July 1, 2021

CVSS v3.1

7.8

EPSS

1%

Percentile

59.1

In the wild

Unconfirmed

What it is

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00890 · 59.1th percentile
Weakness: CWE-416 · Use After Free
Published: 2021-07-01T07:15Z

Affected products (1)

Product	Versions	Fixed in
tesseract-ocr/tesseract_ocr	all versions	—

References (6)

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 · [email protected]https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml · [email protected]https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55 · [email protected]https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 · af854a3a-2127-422b-91ae-364da2661108 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml · af854a3a-2127-422b-91ae-364da2661108 https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

01 JUL 02:47Z
Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call
cvelistv5