Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:libextractor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductLibextractor (946925aa-4179-5538-9261-6088b8a612d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libextractor purl2cpe 2026-06-01 10:11:54.528238
pkg:deb/ubuntu/libextractor purl2cpe 2026-06-01 10:11:54.528242
pkg:github/ndurner/libextractor purl2cpe 2026-06-01 10:11:54.528246
pkg:gnu/libextractor purl2cpe 2026-06-01 10:11:54.528249
pkg:rpm/fedora/libextractor purl2cpe 2026-06-01 10:11:54.528253
pkg:rpm/opensuse/libextractor purl2cpe 2026-06-01 10:11:54.528257

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15531 vulnerable 2026-06-08 05:12:57.538094 Details available
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Published: 2019-08-23T16:03:07.000Z
Updated: 2024-08-05T00:49:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20431 vulnerable 2026-06-08 05:11:27.227848 Details available
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
Published: 2018-12-24T05:00:00.000Z
Updated: 2024-08-05T11:58:19.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20430 vulnerable 2026-06-08 05:11:27.227296 Details available
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
Published: 2018-12-24T05:00:00.000Z
Updated: 2024-08-05T11:58:19.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16430 vulnerable 2026-06-08 05:11:04.843738 Details available
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
Published: 2018-09-04T00:00:00.000Z
Updated: 2024-08-05T10:24:32.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14347 vulnerable 2026-06-08 05:10:52.793266 Details available
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).
Published: 2018-07-17T15:00:00.000Z
Updated: 2024-08-05T09:21:41.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14346 vulnerable 2026-06-08 05:10:52.792753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.