{"action":"Upgrade less to 481-1 or later.","affected":[{"fixed":"481-1","introduced":"0"}],"component":"less","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["481-1"],"id":"tcs_01M5NB0WFG7AAGQ46D380YG22B","modified_at":"2026-10-23T15:47:27.067705722Z","published_at":"2015-04-14T18:59:02.887Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-9488","https://security-tracker.debian.org/tracker/CVE-2014-9488"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-9488","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-9488"}],"summary":"The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read."}