Pocoproject Poco
4 CVEs affecting Pocoproject Poco. Latest disclosed: 2025-08-06. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52389 | Critical | 9.8 | 2024-01-27 | UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32… |
CVE-2025-45766 | High | 7.0 | 2025-08-06 | poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an a… |
CVE-2017-1000472 | Medium | 6.5 | 2018-01-03 | The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header… |
CVE-2025-6375 | Low | 3.3 | 2025-06-21 | A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/s… |