LI
Product
libidn
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 1
Watch
Add libidn to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6263 | 7.5 | Sep 7 | The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via… Affected: through 1.32 |
| CVE-2016-6262 | 7.5 | Sep 7 | idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different… Affected: through 1.32 |
| CVE-2016-6261 | 7.5 | Sep 7 | The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of… Affected: through 1.32 |
| CVE-2015-8948 | 7.5 | Sep 7 | idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read Affected: through 1.32 |
| CVE-2026-57053 | 2.5 | Jun 23 | GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal Affected: before 1.44 |
| CVE-2015-2059 | – | Aug 12 | The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact… Affected: through 1.30 |
Showing 6