MU
Product
musl
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 1Low 0
Watch
Add musl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-3484 | 9.8 | Feb 20 | Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have… Affected: 0.9.13 through 1.0.3; 1.1.0 before 1.1.2 |
| CVE-2019-14697 | 9.8 | Aug 6 | musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory Affected: 0.9.12 through 1.1.23 |
| CVE-2015-1817 | 9.8 | Aug 18 | Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allows attackers to have unspecified impact… Affected: 0.9.15; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +8 more |
| CVE-2026-40200 | 8.1 | Apr 10 | An issue was discovered in musl libc 0.7.10 through 1.2.6 Affected: 0.7.10 through 1.2.6 |
| CVE-2017-15650 | 7.5 | Oct 19 | musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an… Affected: through 1.1.6 |
| CVE-2025-26519 | 7.0 | Feb 14 | musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8 Affected: 0.9.13 before 1.2.6 |
| CVE-2020-28928 | 5.5 | Nov 24 | In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer… Affected: through 1.2.1 |
Showing 7