libtins vulnerabilities
CVEs whose affected-version data names the libtins package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112273Medium· 5.3libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name
libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliv…
▾ Sunlitlibtins · libtinsvia CVEORG
CVE-2026-112274Low· 3.7libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init
libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a z…
▾ Sunlitlibtins · libtinsvia CVEORG