Read the docs

Libpff Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Libpff Project records in CISA KEV

No Libpff Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libpff 3 records LOW

Records

3 records

TI-2018-08386 CVE-2018-11723 · GHSA-fjv9-r9p4-38h5

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff…

Priority LOW 27

The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01142 Published 2018-06-19 No fix listed CWE-125
TI-2018-14403 CVE-2018-20348 · GHSA-8pp8-7wvw-f67f

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714…

Priority LOW 25

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00431 Published 2018-12-22 No fix listed CWE-835
Open these records in search →