Libofx Project Libofx — known CVE vulnerabilities

Every CVE whose affected-product data names Libofx Project Libofx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-2816 — CVSS 8.8 (high): An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can…
• CVE-2019-9656 — CVSS 8.8 (high): An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file…
• CVE-2017-14731 — CVSS 6.5 (medium): ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and…