Boost - vulnerabilities (CVEs)

6 CVEs in 4 products, 0 in the last 30 days, newest from 2026-06-07.

Products

CVE-2026-11460 - CVSS 7.3 (high), 2026-06-07: A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation causes improper validation of…
CVE-2016-9840 - CVSS 8.8 (high), 2017-05-23: inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVE-2013-0252 - CVSS 5 (medium), 2013-03-12: boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might…
CVE-2012-2677 - CVSS 5 (medium), 2012-07-25: Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform…
CVE-2008-0172 - CVSS 5 (medium), 2008-01-17: The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers…
CVE-2008-0171 - CVSS 5 (medium), 2008-01-17: regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a…