Read the docs

libical

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

libical records in CISA KEV

No libical vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 64

libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00244 Published 2026-10-15 Fix deferred CWE-125
Open these records in search →