Libcdio (Gnu) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2024-06-14. Vendor: Gnu.

CVEs of Libcdio

• CVE-2024-36600 - CVSS 8.4 (high), 2024-06-14: Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
• CVE-2017-18201 - CVSS 9.8 (critical), 2018-02-26: An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
• CVE-2017-18199 - CVSS 6.5 (medium), 2018-02-24: realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
• CVE-2017-18198 - CVSS 8.8 (high), 2018-02-24: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly…
• CVE-2007-6613 - CVSS 5 (medium), 2008-01-03: Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79…