CVE-2020-12825
HIGHlibcroco <= 0.6.13 - Uncontrolled Recursion in cr_parser_parse_any_core
Title source: llmDescription
libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
References (4)
Core 4
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://gitlab.gnome.org/GNOME/libcroco/-/issues/8
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/08/13/3
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/09/08/3
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/202208-33
Scores
CVSS v3
7.1
EPSS
0.0475
EPSS Percentile
89.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Details
CWE
CWE-674
Status
published
Products (1)
gnome/libcroco
< 0.6.13
Published
May 12, 2020
Tracked Since
Feb 18, 2026