Approved changes feed: RSS · Atom

cpe:2.3:a:gegl:libbabl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGegl (6cf10816-b781-5fde-a96d-a4d8ccc7d0bc)
ProductLibbabl (0e7b1518-ea2c-592d-979a-b1e4597c5db1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37239 vulnerable 2026-06-08 05:25:50.383789 libbabl 0.1.62 Broken Double Free Detection Memory Safety
CRITICAL (9.8)
libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_free() twice on the same pointer without triggering detection, as libc's malloc metadata overwrites babl's signature field upon freeing, enabling potential memory corruption and code execution.
Published: 2026-05-16T15:25:55.585Z
Updated: 2026-05-18T18:09:18.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.