CVE-2021-33481 - A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c

HIGH

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c

Published Nov 17, 2021

7.8

HIGH

CVSS 3.1

EPSS 1.22%

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Gocr

n/a

Version	Status	Constraints
gocr 0.53-20200802	affected	-

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1962865		ExploitIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20184		Advisory
https://security.gentoo.org/glsa/202401-28		vendor-advisory
https://sourceforge.net/p/jocr/bugs/42/		ExploitThird Party Advisory