Known vulnerabilities in libevent

Vendor: OpenAnolis
Software: libevent
Software CPE: cpe:2.3:o:openanolis:libevent:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libevent libevent is affected by 6 known vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136946 - Improper input validation
CVE-2026-63382		 CWE-20 Medium
No
No
 2.1.8-11 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 8 more
#VU136944 - Out-of-bounds read
CVE-2026-63383		 CWE-125 Medium
No
No
 2.1.8-11, 2.1.12-7 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136943 - Integer overflow
CVE-2026-63384		 CWE-190 Medium
No
No
 2.1.8-11, 2.1.12-7 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136941 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-63385		 CWE-444 Medium
No
No
 2.1.8-11 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 8 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387		 CWE-121 Medium
No
No
 2.1.8-11, 2.1.12-5 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 8 more
#VU136938 - Out-of-bounds write
CVE-2026-63388		 CWE-787 Low
No
No
 2.1.8-11 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 7 more