| Bug | stretch | buster | bullseye | sid | Description |
|---|
| CVE-2020-36281 | fixed | vulnerable (no DSA) | fixed | fixed | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFew ... |
| CVE-2020-36280 | fixed | vulnerable (no DSA) | fixed | fixed | Leptonica before 1.80.0 allows a heap-based buffer over-read in pixRea ... |
| CVE-2020-36279 | fixed | vulnerable (no DSA) | fixed | fixed | Leptonica before 1.80.0 allows a heap-based buffer over-read in raster ... |
| CVE-2020-36278 | fixed | vulnerable (no DSA) | fixed | fixed | Leptonica before 1.80.0 allows a heap-based buffer over-read in findNe ... |
| CVE-2020-36277 | fixed | vulnerable (no DSA) | fixed | fixed | Leptonica before 1.80.0 allows a denial of service (application crash) ... |
| CVE-2018-7442 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutp ... |
| CVE-2018-7186 | vulnerable (no DSA) | fixed | fixed | fixed | Leptonica before 1.75.3 does not limit the number of characters in a % ... |
| CVE-2018-3836 | vulnerable (no DSA) | fixed | fixed | fixed | An exploitable command injection vulnerability exists in the gplotMake ... |
| CVE-2017-18196 | vulnerable (no DSA) | fixed | fixed | fixed | Leptonica 1.74.4 constructs unintended pathnames (containing duplicate ... |