Libconfuse Project Libconfuse — known CVE vulnerabilities

Every CVE whose affected-product data names Libconfuse Project Libconfuse, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-14447 — CVSS 8.8 (high): trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
• CVE-2018-19760 — CVSS 8.8 (high): cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
• CVE-2022-40320 — CVSS 8.8 (high): cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.