CVE-2022-38266

6.5

MEDIUMCVSS v3

Published

September 9, 2022

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

DanBloomberg/leptonica

GitHubLeptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/leptonica. See leptonica.org for more documentation.

< 1.80.0NVD

tesseract

Python Package IndexTesselation based Recovery of Amorphous halo Concentrations

= 5.0.0NVD

tesseract

More on this CVE

NVD↗GitHub Advisory↗

Crates.ioHigher-level bindings for Tesseract OCR

= 5.0.0NVD

Tesseract

NuGet GalleryTesseract 5 adds a new neural net (LSTM) based OCR engine which is focused on line recognition, but also still supports the legacy Tesseract OCR engine of Tesseract 3 which works by recognizing character patterns. Compatibility with Tesseract 3 is enabled by using the Legacy OCR Engine mode (--oem 0). It also needs traineddata files which support the legacy engine, for example those from the tessdata repository.

= 5.0.0NVD

tesseract

NPMTesseract OCR bindings for Node.js

= 5.0.0NVD

tesseract

RubyGemsRuby wrapper for google tesseract

= 5.0.0NVD

tesseract-ocr/tesseract

GitHubTesseract Open Source OCR Engine (main repository)

= 5.0.0NVD

Security Advisories

CVE-2022-38266

Description

More on this CVE