Read the docs

uriparser

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

uriparser records in CISA KEV

No uriparser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Uriparser · all components

Priority MEDIUM 46

URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[::44.1" address.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0205 Published 2019-01-16 Fix deferred CWE-125
Open these records in search →