OSV-2023-952

    Dashboard / Vulnerabilities / OSV-2023-952

    OSV-2023-952

    Published: 2 Oct 2023Last Modified: 22 Dec 2025

    Summary: Heap-buffer-overflow in back_passDoAction

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62875 ``` Crash type: Heap-buffer-overflow READ 10 Crash state: back_passDoAction _lou_backTranslate lou_backTranslateString ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62875

    Affected packages

    Package

    Name: liblouis

    Purl: pkg:generic/liblouis

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7d66e40712f6b44f33d9b4bdcfe42db3e65082b8
    Fixed -f8da4099d1774e153e2cc45d0d39663b5762f381

    Affected versions

    v3.26.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-952 | CVE-DB