CVE-2018-17294: Medium severity Liblouis Liblouis vulnerability
Last updated 25 August 2025
Other sources
The matchCurrentInput function inside loutranslateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-17294?
CVE-2018-17294 is a vulnerability in Liblouis prior to version 3.7 that allows attackers to cause a denial of service (application crash) by crafting a malicious input file.
How severe is CVE-2018-17294 vulnerability?
The severity of CVE-2018-17294 is rated as medium with a CVSS score of 6.5.
How can the CVE-2018-17294 vulnerability be exploited?
CVE-2018-17294 can be exploited by crafting a special input file with certain translation dictionaries to trigger an out-of-bounds read, leading to a denial of service.
What versions of Liblouis are affected by CVE-2018-17294?
Liblouis versions prior to 3.7 are affected by CVE-2018-17294.
How can I fix CVE-2018-17294 vulnerability?
To fix CVE-2018-17294, update Liblouis to version 3.7.0 or later.