libEMF (SUSE:Linux Enterprise Software Development Kit 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 12 SP5 package libEMF, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2020-11865 — CVSS 7.8 (high): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.
• CVE-2020-11866 — CVSS 7.8 (high): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
• CVE-2020-11863 — CVSS 5.5 (medium): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).
• CVE-2020-11864 — CVSS 5.5 (medium): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).
• CVE-2020-13999 — CVSS 5.5 (medium): ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a…