CVE-2020-12862

Name of the Vulnerable Software and Affected Versions SANE Backends versions prior to 1.0.30

Description The issue is related to an out-of-bounds read in the SANE Backends interface, which provides access to scanning devices. This may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program.

Recommendations For versions prior to 1.0.30, update to version 1.0.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the SANE Backends interface to minimize the risk of exploitation.