Libextractor
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:libextractor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Libextractor (946925aa-4179-5538-9261-6088b8a612d4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libextractor |
purl2cpe | 2026-06-01 10:11:54.528238 |
pkg:deb/ubuntu/libextractor |
purl2cpe | 2026-06-01 10:11:54.528242 |
pkg:github/ndurner/libextractor |
purl2cpe | 2026-06-01 10:11:54.528246 |
pkg:gnu/libextractor |
purl2cpe | 2026-06-01 10:11:54.528249 |
pkg:rpm/fedora/libextractor |
purl2cpe | 2026-06-01 10:11:54.528253 |
pkg:rpm/opensuse/libextractor |
purl2cpe | 2026-06-01 10:11:54.528257 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-91752 |
vulnerable | 2026-09-16 04:32:55.562889 |
GNU libextractor before 1.15 Stack Overflow via OLE2
HIGH (7.5)
GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.
Published: 2026-09-15T00:35:43.518Z
Updated: 2026-09-17T19:29:34.522Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15531 |
vulnerable | 2026-06-08 05:12:57.538094 |
Details available
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Published: 2019-08-23T16:03:07.000Z
Updated: 2024-08-05T00:49:13.629Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20431 |
vulnerable | 2026-06-08 05:11:27.227848 |
Details available
GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
Published: 2018-12-24T05:00:00.000Z
Updated: 2024-08-05T11:58:19.176Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20430 |
vulnerable | 2026-06-08 05:11:27.227296 |
Details available
GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.
Published: 2018-12-24T05:00:00.000Z
Updated: 2024-08-05T11:58:19.366Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16430 |
vulnerable | 2026-06-08 05:11:04.843738 |
Details available
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
Published: 2018-09-04T00:00:00.000Z
Updated: 2024-08-05T10:24:32.039Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14347 |
vulnerable | 2026-06-08 05:10:52.793266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14346 |
vulnerable | 2026-06-08 05:10:52.792753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.