Sane-project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2023-46047

    An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.

    Last Modified: Nov 04, 2025
    Published: Mar 27, 2024

    CVE-2023-46052

    Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file.

    Last Modified: Nov 04, 2025
    Published: Mar 27, 2024

    CVE-2020-12867

    sane-backends: NULL pointer dereference in sanei_epson_net_read function

    Last Modified: Nov 21, 2024
    Published: Jun 01, 2020

    CVE-2020-12862

    sane-backends: Out-of-bounds read in decode_binary

    Last Modified: Nov 21, 2024
    Published: May 17, 2020

    CVE-2020-12861

    sane-backends: Heap buffer overflow in epsonds_net_read in epsonds-net.c

    Last Modified: Nov 21, 2024
    Published: May 17, 2020
    Items Per Page
    Sane-Project Vulnerabilities & Security CVEs | CVE-DB