high7.8
CVE-2022-26981
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
Impact
Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Liblouis | Liblouis | through 3.21.0 |
| Fedoraproject | Fedora | Version 36 |
| Apple | Ipados | before 15.6 |
| Apple | Iphone Os | before 15.6 |
| Apple | Macos | from 12.0 before 12.5 |
| Apple | Tvos | before 15.6 |
| Apple | Watchos | before 8.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2022/Jul/12
- http://seclists.org/fulldisclosure/2022/Jul/15
- http://seclists.org/fulldisclosure/2022/Jul/16
- http://seclists.org/fulldisclosure/2022/Jul/18
- https://github.com/liblouis/liblouis/issues/1171
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFD2KIHESDUCNWTEW3USFB5GKTWT624L/
- https://security.gentoo.org/glsa/202301-06
- https://support.apple.com/kb/HT213340
- https://support.apple.com/kb/HT213342
- https://support.apple.com/kb/HT213345
- https://support.apple.com/kb/HT213346
- http://seclists.org/fulldisclosure/2022/Jul/12
- http://seclists.org/fulldisclosure/2022/Jul/15
- http://seclists.org/fulldisclosure/2022/Jul/16
- http://seclists.org/fulldisclosure/2022/Jul/18
- https://github.com/liblouis/liblouis/issues/1171
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFD2KIHESDUCNWTEW3USFB5GKTWT624L/
- https://security.gentoo.org/glsa/202301-06
- https://support.apple.com/kb/HT213340
- https://support.apple.com/kb/HT213342
- https://support.apple.com/kb/HT213345
- https://support.apple.com/kb/HT213346