CVE-2005-1141: Optical Character Recognition Project Optical Character Recognition

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.

Affected products

• Optical Character Recognition Project Optical Character Recognition: version 0.40 only

Published 2005-04-15. Last modified 2026-06-16.