Musl-Libc
4 CVEs across 1 Musl-Libc products. Browse Musl-Libc vulnerabilities, severities, and proof-of-concept exploits.
Musl-Libc products with known CVEs
Musl-Libc CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-40200 | High | 8.1 | 2026-04-10 | An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implem… |
CVE-2025-26519 | High | 8.1 | 2025-02-14 | musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to… |
CVE-2020-28928 | Medium | 5.5 | 2020-11-24 | In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid… |
CVE-2014-3484 | Critical | 9.8 | 2020-02-20 | Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote a… |
CVE-2019-14697 | Critical | 9.8 | 2019-08-06 | musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could in… |
CVE-2017-15650 | High | 7.5 | 2017-10-19 | musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addre… |
CVE-2015-1817 | Critical | 9.8 | 2017-08-18 | Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allows attackers to hav… |