libEMF (SUSE:Linux Enterprise Workstation Extension 12 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Workstation Extension 12 SP4 package libEMF, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2020-11865 — CVSS 7.8 (high): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.
• CVE-2020-11866 — CVSS 7.8 (high): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
• CVE-2020-11863 — CVSS 5.5 (medium): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).
• CVE-2020-11864 — CVSS 5.5 (medium): libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).