CVE-2018-25279 MEDIUM

CVE-2018-25279: jiNa OCR Image to Text 1.0 Denial of Service via PNG

Vendor Convertimagetotext

Product jiNa OCR Image to Text

Weakness CWE-789

Published April 26, 2026

Last update April 27, 2026

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF.

Key dates

02Disclosure timeline

April 26, 2026 CVE published

April 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-25279 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/789.html

Related vulnerabilities

04Related CVE

CVE-2024-52791 Denial of service through memory exhaustion in Matrix Media Repo CVE-2026-25899 Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation CVE-2022-22188 Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang. CVE-2025-4605 USD File Parsing Memory Allocation Vulnerability CVE-2023-5371 Memory Allocation with Excessive Size Value in Wireshark