Approved changes feed: RSS · Atom

cpe:2.3:a:leptonica:leptonica:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLeptonica (b87e10ed-41b2-5e5f-8c72-8748922f8b8f)
ProductLeptonica (64e2e952-968a-535c-80e5-5b11619daa26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/danbloomberg/leptonica purl2cpe 2026-06-01 10:11:59.308014
pkg:gitlab/redhat/leptonica purl2cpe 2026-06-01 10:11:59.308017
pkg:rpm/centos/leptonica purl2cpe 2026-06-01 10:11:59.308020
pkg:rpm/fedora/leptonica purl2cpe 2026-06-01 10:11:59.308022
pkg:rpm/opensuse/leptonica purl2cpe 2026-06-01 10:11:59.308025

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38266 vulnerable 2026-06-08 05:47:16.076656 Details available
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
Published: 2022-09-09T00:00:00.000Z
Updated: 2024-08-03T10:45:53.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36281 vulnerable 2026-06-08 05:25:02.921168 Details available
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
Published: 2021-03-12T00:00:58.000Z
Updated: 2024-08-04T17:23:09.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36280 vulnerable 2026-06-08 05:25:02.920585 Details available
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
Published: 2021-03-12T00:00:24.000Z
Updated: 2024-08-04T17:23:10.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36279 vulnerable 2026-06-08 05:25:02.919869 Details available
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
Published: 2021-03-12T00:00:03.000Z
Updated: 2024-08-04T17:23:09.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36278 vulnerable 2026-06-08 05:25:02.919023 Details available
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Published: 2021-03-11T23:59:41.000Z
Updated: 2024-08-04T17:23:10.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36277 vulnerable 2026-06-08 05:25:02.918095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7442 vulnerable 2026-06-08 05:12:03.680728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7441 vulnerable 2026-06-08 05:12:03.680357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7440 vulnerable 2026-06-08 05:12:03.680075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7247 vulnerable 2026-06-08 05:12:03.513043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7186 vulnerable 2026-06-08 05:11:55.150522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.