Libmicrohttpd (Gnu) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 62 known versions, newest CVE from 2025-11-10. Vendor: Gnu.

CVEs of Libmicrohttpd

• CVE-2025-62689 - CVSS 8.7 (high), 2025-11-10: NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of…
• CVE-2025-59777 - CVSS 8.7 (high), 2025-11-10: NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of…
• CVE-2023-27371 - CVSS 5.9 (medium), 2023-02-28: GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c…
• CVE-2021-3466 - CVSS 9.8 (critical), 2021-03-25: A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to…
• CVE-2013-7039 - CVSS 5.1 (medium), 2013-12-13: Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large…
• CVE-2013-7038 - CVSS 6.4 (medium), 2013-12-13: The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service…