Sane-Project

9 CVEs across 1 Sane-Project products. Browse Sane-Project vulnerabilities, severities, and proof-of-concept exploits.

Sane-Project products with known CVEs

ProductCVEs
Sane Backends9
Sane-Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-46052High7.12024-03-27Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file. NOTE: this is disputed because ther…
CVE-2023-46047High7.32024-03-27An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed be…
CVE-2020-12866Medium5.72020-06-24A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of serv…
CVE-2020-12865High8.02020-06-24A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code…
CVE-2020-12864Medium4.32020-06-24An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati…
CVE-2020-12863Medium4.32020-06-24An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati…
CVE-2020-12862Medium4.32020-06-24An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important informati…
CVE-2020-12861High8.82020-06-24A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, ak…
CVE-2020-12867Medium5.52020-06-01A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim t…