CVE-2025-15536

Medium

Description

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. Patch name: 345c9a50ab07018f1b4439776bad78a0d40778ec. To fix this issue, it is recommended to deploy a patch.

SeverityMedium

CVSS5.3

Exploit probability—

ProductByvoid Open Chinese Convert

PublishedJan 18, 2026

First seenJan 18, 2026

Weakness typeCWE-122CWE-122 CWE-119Memory buffer bounds error

How to fix

Update

opencc1.2.0 or later

Patches

github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec

Affected products

Product	Affected versions	Fixed in
byvoid open_chinese_convert	v ≤ 1.1.9	—
openccnpm	v < 1.2.0	1.2.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.