Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
THULAC 缓冲区错误漏洞
Vulnerability Description
THULAC是由清华大学自然语言处理与社会人文计算实验室推出的一套中文词法分析工具包，它支持中文分词和词性标注功能。 THULAC 2018-02-25及版本中的libthulac.so静态链接库的include/cb_ngram_feature.h文件的‘NGramFeature::find_bases ’函数存在基于堆的缓冲区越界读取漏洞。攻击者可通过诱使用户打开特制的文件利用该漏洞造成应用程序崩溃，导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A