Approved changes feed: RSS · Atom

cpe:2.3:a:kodi:kodi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKodi (15ccd52a-520f-5fcd-89f9-132bfcd587fb)
ProductKodi (516f3934-512f-50db-82a2-c4b5b55068c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kodi purl2cpe 2026-06-01 10:16:39.190305
pkg:deb/ubuntu/kodi purl2cpe 2026-06-01 10:16:39.190309
pkg:github/xbmc/xbmc purl2cpe 2026-06-01 10:16:39.190312
pkg:sourceforge/kodi.mirror purl2cpe 2026-06-01 10:16:39.190315

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30207 vulnerable 2026-06-08 06:02:43.927245 Details available
A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-08-02T14:21:44.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23082 vulnerable 2026-06-08 05:54:27.817557 Details available
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument.
Published: 2023-02-03T00:00:00.000Z
Updated: 2024-08-02T10:28:39.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42917 vulnerable 2026-06-08 05:35:23.045697 Details available
Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.
Published: 2021-11-01T00:00:00.000Z
Updated: 2024-11-18T20:46:55.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8831 vulnerable 2026-06-08 05:12:06.507600 Details available
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.
Published: 2018-04-18T17:00:00.000Z
Updated: 2024-08-05T07:02:26.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8314 vulnerable 2026-06-08 05:10:08.053887 Details available
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
Published: 2017-05-23T21:00:00.000Z
Updated: 2024-08-05T16:34:22.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.