CVE:CVE-2020-36279
CNNVD:CNNVD-202103-817
Dan Bloomberg Leptonica是 Dan Bloomberg开源的一个应用软件。提供基本图像处理和图像分析操作。
Leptonica before 1.80.0 存在安全漏洞，该漏洞源于adaptmap reg.c和adaptmap.c，导致基于堆的缓冲区过读。
solution:Upgrade leptonica leptonica to a higher version than 1.80.0,and avoid the version (,1.80.0); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0