CVE-2018-17294

The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.

• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.htmlThird Party Advisory
• http://www.securityfocus.com/bid/105511Third Party Advisory, VDB Entry
• https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396ePatch, Third Party Advisory
• https://github.com/liblouis/liblouis/issues/635Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/3782-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.htmlThird Party Advisory
• http://www.securityfocus.com/bid/105511Third Party Advisory, VDB Entry
• https://github.com/liblouis/liblouis/commit/5e4089659bb49b3095fa541fa6387b4c40d7396ePatch, Third Party Advisory
• https://github.com/liblouis/liblouis/issues/635Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/3782-1/Third Party Advisory

Published

Sep 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17287In Kofax Front Office Server Administration Console 4.1.1.11…
• CVE-2018-17288Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin…
• CVE-2018-17289An XML external entity (XXE) vulnerability in Kofax Front Of…
• CVE-2018-1729IBM QRadar SIEM 7.3 discloses sensitive information to unaut…5.3
• CVE-2018-17292An issue was discovered in WAVM before 2018-09-16. The loadM…
• CVE-2018-17293An issue was discovered in WAVM before 2018-09-16. The run f…
• CVE-2018-17297The unzip function in ZipUtil.java in Hutool before 4.1.12 a…
• CVE-2018-17298An issue was discovered in Enalean Tuleap before 10.5. Reset…
• CVE-2018-1730IBM QRadar SIEM 7.2 and 7.3 is vulnerable to a XML External …7.1
• CVE-2018-17300Stored XSS exists in CuppaCMS through 2018-09-03 via an admi…4.8
• CVE-2018-17301Reflected XSS exists in client/res/templates/global-search/n…
• CVE-2018-17302Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.…