Known vulnerabilities in libyang

Vendor: CESNET
Software: libyang
Software CPE: cpe:2.3:a:cesnet:libyang:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libyang libyang is affected by 21 known vulnerabilities: 6 high, 14 medium, 1 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136055 - Stack-based buffer overflow
CWE-121 Medium
Available
No
5.8.9 01.07.2026 SB2026070137
#VU136053 - Use After Free
CWE-416 High
Available
No
5.8.9 01.07.2026 SB2026070137
#VU125337 - Use After Free
CWE-416 Low
No
No
5.2.6 08.04.2026 SB2026052047
#VU125336 - Uncontrolled Recursion
CWE-674 Medium
No
No
5.0.6, 5.4.9 08.04.2026 SB2026052046
#VU115763 - NULL Pointer Dereference
CVE-2023-26917
CWE-476 Medium
No
No
2.1.55 18.09.2025 SB20230411121
SB2025091831
#VU79701 - NULL Pointer Dereference
CVE-2023-26916
CWE-476 Medium
No
No
2.1.30 18.08.2023 SB20230818195
SB20230818206
SB20230818207
and 3 more
#VU55305 - Unchecked Return Value
CVE-2021-28906
CWE-252 Medium
No
No
1.0.240 26.07.2021 SB2021052044
SB2021072611
SB2022091211
#VU55304 - Reachable Assertion
CVE-2021-28905
CWE-617 Medium
No
No
1.0.240 26.07.2021 SB2021052044
SB2021072611
SB2022082619
#VU55303 - Unchecked Return Value
CVE-2021-28904
CWE-252 Medium
No
No
1.0.240 26.07.2021 SB2021052044
SB2021072611
SB2022091211
#VU55302 - Uncontrolled Recursion
CVE-2021-28903
CWE-674 Medium
No
No
1.0.240 26.07.2021 SB2021052044
SB2021072611
SB2022091211
#VU55301 - Unchecked Return Value
CVE-2021-28902
CWE-252 Medium
No
No
1.0.240 26.07.2021 SB2021052044
SB2021072611
SB2022091211
#VU34861 - Memory corruption
CVE-2019-20391
CWE-119 Medium
No
No
- 22.01.2020 SB2020012248
SB2021110204
SB2024042354
and 2 more
#VU34862 - Memory corruption
CVE-2019-20392
CWE-119 Medium
No
No
- 22.01.2020 SB2020012249
SB2021110204
SB2024042354
and 2 more
#VU34863 - Double Free
CVE-2019-20393
CWE-415 High
No
No
- 22.01.2020 SB2020012249
SB2021110204
SB2024042354
and 2 more
#VU34864 - Double Free
CVE-2019-20394
CWE-415 High
No
No
- 22.01.2020 SB2020012248
SB2021110204
SB2024042354
and 2 more
#VU34865 - Resource exhaustion
CVE-2019-20395
CWE-400 Medium
No
No
- 22.01.2020 SB2020012249
SB2021110204
SB2024042354
and 2 more
#VU34866 - Improper input validation
CVE-2019-20396
CWE-20 Medium
No
No
- 22.01.2020 SB2020012249
SB2021110204
SB2024042354
and 2 more
#VU34867 - Double Free
CVE-2019-20397
CWE-415 High
No
No
- 22.01.2020 SB2020012249
SB2021110204
SB2024042354
and 2 more
#VU34868 - NULL Pointer Dereference
CVE-2019-20398
CWE-476 Medium
No
No
- 22.01.2020 SB2020012248
SB2021110204
SB2024042354
and 2 more
#VU23798 - Stack-based buffer overflow
CVE-2019-19334
CWE-121 High
No
No
1.0-r5 23.12.2019 SB2019120609
SB2019122306
SB2024042354
and 4 more


Showing elements 1 - 20 out of 21