Cesnet / Libyang
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-44673 | libyang: lyb_read_string() integer overflow → heap buffer overflow | HIGH | 7.5 | May 14, 2026 |
| CVE-2023-26917 | libyang: NULL pointer dereference via lysp_stmt_validate_value at lys_parse_mem.c | HIGH | 7.5 | Apr 11, 2023 |
| CVE-2023-26916 | libyang: NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c | MEDIUM | 5.3 | Apr 3, 2023 |
| CVE-2021-28906 | libyang: NULL pointer dereference in read_yin_leaf() | HIGH | 7.5 | May 20, 2021 |
| CVE-2021-28905 | libyang: reachable assertion in lys_node_free() | HIGH | 7.5 | May 20, 2021 |
| CVE-2021-28904 | libyang: NULL pointer dereference in ext_get_plugin() | HIGH | 7.5 | May 20, 2021 |
| CVE-2021-28903 | libyang: recursive call to lyxml_parse_mem() lead to crash | HIGH | 7.5 | May 20, 2021 |
| CVE-2021-28902 | libyang: NULL pointer dereference in read_yin_container() | HIGH | 7.5 | May 20, 2021 |
| CVE-2019-20398 | libyang: NULL pointer dereference in function lys_extension_instances_free() | MEDIUM | 6.5 | Jan 22, 2020 |
| CVE-2019-20397 | libyang: double-free in yyparse() when organization field is not terminated | HIGH | 8.8 | Jan 22, 2020 |
| CVE-2019-20396 | libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern | MEDIUM | 6.5 | Jan 22, 2020 |
| CVE-2019-20395 | libyang: stack-overflow when parsing yang files with self-referential union types | MEDIUM | 6.5 | Jan 22, 2020 |
| CVE-2019-20394 | libyang: double-free in yyparse() when a type statement is used in a notification statement | HIGH | 8.8 | Jan 22, 2020 |
| CVE-2019-20393 | libyang: double-free in function yyparse() when empty description is used | HIGH | 8.8 | Jan 22, 2020 |
| CVE-2019-20392 | libyang: invalid memory access when if-feature statement is used inside a list key node | MEDIUM | 6.5 | Jan 22, 2020 |
| CVE-2019-20391 | libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit | MEDIUM | 6.5 | Jan 22, 2020 |
| CVE-2019-19334 | libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used | CRITICAL | 9.8 | Dec 6, 2019 |
| CVE-2019-19333 | libyang: stack-based buffer overflow in make_canonical when bits leaf type is used | CRITICAL | 9.8 | Dec 6, 2019 |
Showing 1 to 18 of 18 CVEs