CVE-2023-26767

Name of the Vulnerable Software and Affected Versions Liblouis version 3.24.0

Description The issue is related to a buffer overflow vulnerability in the lou logFile function of the Liblouis translator, which is caused by copying a buffer without checking the size of the input data. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is associated with the lou logFile function at the logginc.c endpoint.

Recommendations For Liblouis version 3.24.0, consider disabling the lou logFile function as a temporary workaround until a patch is available. Restrict access to the logginc.c endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.