← Back

Libsafe

libsafe

Vendor: Avaya • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Avaya
1Libsafe
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is complete...Show more
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.Show less
1Avaya
1Libsafe
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
1Avaya
1Libsafe
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.