← Back

Pkgconf

pkgconf

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Pkgconf
pkgconf
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-24056
1Pkgconf
1Pkgconf
Jun 17, 2026
Jan 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to...Show more
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.Show less
CVE-2018-1000221
1Pkgconf
1Pkgconf
Nov 21, 2024
Aug 20, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear...Show more
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to have been fixed in 1.5.3.Show less