← Back

Libcdio

libcdio

Vendor: Gnu • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-36600
1Gnu
1Libcdio
Jun 17, 2026
Jun 14, 2024
N/A· v4
8.4 HIGH· v3
N/A· v2
Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.
CVE-2017-18201
1Gnu
1Libcdio
Nov 21, 2024
Feb 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
CVE-2017-18199
1Gnu
1Libcdio
Nov 21, 2024
Feb 24, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
CVE-2017-18198
1Gnu
1Libcdio
Nov 21, 2024
Feb 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
CVE-2007-6613
1Gnu
1Libcdio
Apr 23, 2026
Jan 3, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial...Show more
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.Show less