Impact
A local attacker can induce a denial of service by creating a specially crafted PNG file with an oversized buffer. When the jiNa OCR Image to Text 1.0 application attempts to convert this file to PDF, the buffer overflow causes the program to crash, resulting in an outage. The weakness is an Out‑of‑Bounds Buffer Access, classified as CWE‑789.
Affected Systems
The vulnerability affects the jiNa OCR Image to Text application compiled in version 1.0, as distributed by Convertimagetotext. No other versions or product lines are referenced in the advisory.
Risk and Exploitability
The CVSS score of 6.9 indicates a moderate impact. The EPSS score is listed as less than 1%, suggesting that exploitation is very unlikely in the wild. The vulnerability is not included in the CISA KEV catalog. Attackers must have local access to the system running the application; remote exploitation is not described in the data. There are no publicly known exploits beyond the exploit‑db reference, so the attack path requires an attacker with a foothold on the machine to supply the malformed PNG.
OpenCVE Enrichment