~ / search / GHSA-9qh2-6fxg-9m4g

GHSA-9qh2-6fxg-9m4g

Open Chinese Convert subject to Denial of Service via Out-of-bounds Read

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-16982

Packages

EcosystemPackageAffectedFixed in
npm opencc < 1.1.2 1.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.

References

External links from the advisory. They lead to third-party sites.