Known vulnerabilities in file
Vendor:
Ian F. Darwin
Software:
file
Software CPE:
cpe:2.3:a:darwin:file:*:*:*:*:*:*:*:*
Website:
https://www.darwinsys.com
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
5.48
5.47
5.46
5.45
5.44
5.43
5.42
5.41
5.40
4.9
4.8
4.7
4.6
4.5
4.4
4.3
5.39
0.9.1
0.9.2
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.2.0
1.2.1
1.2.2
1.3.0
1.4.0
1.4.1
5.38
5.37
4.2
5.36
5.35
5.34
5.32
5.31
5.30
5.29
5.28
5.27
5.26
5.25
5.24
5.23
5.22
5.21
5.20
5.19
5.18
5.17
5.16
5.15
5.14
5.13
5.12
5.11
5.10
5.09
5.08
5.07
5.06
5.05
5.04
5.03
5.02
5.01
5.00
4.26
4.25
4.24
4.23
4.22
4.21
4.20
4.19
4.18
4.17
4.16
4.15
4.14
4.13
4.12
4.11
4.10
4.09
4.08
4.07
4.06
4.05
4.04
4.03
4.02
4.01
4.00
3.41
3.40
3.39
3.38
3.37
3.36
3.35
3.34
3.33
3.32
3.31
3.30
3.28
3.27
5.33
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU80421 - Out-of-bounds read CVE-2022-48554 |
CWE-125 | Low | 5.43 | 05.09.2023 |
SB2023090535 SB2023090536 SB2023091257 and 52 more |
||
| #VU22303 - Heap-based Buffer Overflow CVE-2019-18218 |
CWE-122 | Low | Not fixed | 27.10.2019 | - | ||
| #VU17829 - Out-of-bounds read CVE-2019-8904 |
CWE-125 | Low | 5.36 | 22.02.2019 |
SB2019022104 SB2019031803 SB2019030303 and 3 more |
||
| #VU17823 - Out-of-bounds read CVE-2019-8906 |
CWE-125 | Low | 5.36 | 21.02.2019 |
SB2019022104 SB2019031803 SB2019041205 and 8 more |
||
| #VU17822 - Stack-based buffer overflow CVE-2019-8907 |
CWE-121 | Low | 5.36 | 21.02.2019 |
SB2019022104 SB2019031803 SB2019041205 and 7 more |
||
| #VU17821 - Out-of-bounds read CVE-2019-8905 |
CWE-125 | Low | 5.36 | 21.02.2019 |
SB2019022104 SB2019031803 SB2019041205 and 7 more |
||
| #VU38300 - Memory corruption CVE-2017-1000249 |
CWE-119 | Low | - | 11.09.2017 | - | ||
| #VU32448 - Resource Management Errors CVE-2014-9621 |
CWE-399 | Medium | 5.22 | 21.01.2015 |
SB2015012102 SB2015020217 SB2015031603 |
||
| #VU32447 - Resource Management Errors CVE-2014-9620 |
CWE-399 | Medium | 5.22 | 21.01.2015 |
SB2015012101 SB2015020216 SB2015031603 |
||
| #VU32446 - Resource Management Errors CVE-2014-8116 |
CWE-399 | Medium | 5.21 | 17.12.2014 |
SB2014121701 SB2015013009 |
||
| #VU32802 - Memory corruption CVE-2012-1571 |
CWE-119 | Medium | 5.11 | 18.07.2012 |
SB2012071801 SB2012041904 SB2014091920 and 2 more |