Llibevent

Products

Exploited and recent CVEs

• CVE-2026-63385 Critical 9.2 Libevent: HTTP header handling bugs create risk of access control bypass. 1.3%
• CVE-2026-63379 Medium 6.3 Libevent: HTTP Header smuggling 0.7%
• CVE-2026-63387 High 7.0 Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 0.4%
• CVE-2026-63384 High 8.7 Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. 0.5%
• CVE-2026-63380 Medium 5.7 Libevent: Null Pointer Dereference in `evws_new_session` 0.1%
• CVE-2026-63382 Critical 9.2 libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling 0.8%
• CVE-2026-63381 Medium 5.8 Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` 0.2%
• CVE-2026-63495 High 7.5 Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames 0.6%
• CVE-2026-63383 High 8.7 Libevent: decode_tag_internal() can lead to out-of-bounds read 0.5%
• CVE-2026-63388 High 8.4 Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept 0.1%