Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-111269

libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string

libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the application or leak adjacent heap memory.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Libical Libical Project
Products
Libical Libical
CVE-2016-5825

libical: Heap buffer over-read in icalparser_parse_string function

The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Libical Project
Products
Libical
CVE-2016-5823

libical: Segmentation fault on crafted file

The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

CVSS 3.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Libical Project
Products
Libical
CVE-2016-5827

libical: Heap buffer over-read in icaltime_from_string

The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Libical Project
Products
Libical
CVE-2016-9584

libical: Use-after-free

libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

CVSS 3.0 · 9.1 Critical EPSS 2.3% KEV · Not listed
Vendors
Libical Project
Products
Libical
CVE-2016-5826

libical: Heap buffer over-read in parser_get_next_char

The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Libical Project
Products
Libical