CVE-2014-8184

HIGH

liblouis 2.5.0-2.5.3 - Stack-based Buffer Overflow in findTable()

Title source: llm

Description

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.

References (2)

Core 2

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://github.com/liblouis/liblouis/issues/425

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8184

Scores

CVSS v3 7.8

EPSS 0.0155

EPSS Percentile 72.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-121

Status published

Products (1)

liblouis/liblouis 2.5.0 - 2.5.4

Published Aug 02, 2019

Tracked Since Feb 18, 2026