CVE-2021-36081
גבוהה 7.8
תיאור (מקור, אנגלית)
Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-416
מוצרים מושפעים
tesseract-ocr: tesseract ocr; linux: linux kernel
קישורים
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 ExploitIssue TrackingPatchThird Party Advisory
- https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8… PatchThird Party Advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 ExploitIssue TrackingPatchThird Party Advisory
- https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8… PatchThird Party Advisory
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-202… Third Party Advisory
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-202… Third Party Advisory