Low severity3.3NVD Advisory· Published Feb 23, 2018· Updated Jun 17, 2026
CVE-2017-18196
CVE-2017-18196
Description
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- bugs.debian.org/885704nvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202312-01nvd
News mentions
0No linked articles in our index yet.