Libical Project Libical — known CVE vulnerabilities

Every CVE whose affected-product data names Libical Project Libical, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2016-9584 — CVSS 9.1 (critical): libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
• CVE-2016-5826 — CVSS 7.5 (high): The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by…
• CVE-2016-5827 — CVSS 7.5 (high): The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)…
• CVE-2016-5823 — CVSS 5.5 (medium): The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a…
• CVE-2016-5824 — CVSS 5.5 (medium): libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
• CVE-2016-5825 — CVSS 5.5 (medium): The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)…