CNNVD-202601-2965 Information
CNNVD ID
CNNVD-202601-2965
Related CVE
- CNNVD Published: 2026-01-18
Description (Chinese)
Open Chinese Convert是Carbo Kuo个人开发者的一个繁体中文与简体中文的转换软件。 BYVoid OpenCC 1.1.9及之前版本存在安全漏洞，该漏洞源于src/MaxMatchSegmentation.cpp文件中opencc::MaxMatchSegmentation函数存在堆缓冲区溢出，可能导致本地攻击。
Description (English)
Open Chinese Convert is a Chinese and Chinese-speaking conversion software for Carbo Kuo personal developers. There is a security loophole in ByVoid OpenCC 1.1.9 and earlier versions, which is derived from the src/MaxMatchSegmentation.cpp document opencc:MaxMatchSegment function contains a flood of buffers that could lead to local attacks.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2026-01-18
Last Modified
2026-02-24
References
https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec https://github.com/BYVoid/OpenCC/issues/997 https://github.com/BYVoid/OpenCC/pull/1005 https://github.com/oneafter/1222/blob/main/repro https://vuldb.com/?ctiid.341708 https://vuldb.com/?id.341708 https://vuldb.com/?submit.733347
Share on: