CVE-2005-1142: Gocr Optical Character Recognition Utility

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

Affected products

• Gocr Optical Character Recognition Utility: version 0.3.2 only; version 0.3.4 only; version 0.37 only; version 0.39 only; version 0.40 only

Published 2005-04-15. Last modified 2026-06-16.