CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing...
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Exploit likelihood
What each source reports
NVD Score used
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
- Record
CVE-2002-0176- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
- Record
CVE-2002-0176- Updated
- 2026-11-02
EUVDEUVD-2002-0174 No score
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
- Record
EUVD-2002-0174- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-38pf-hw2h-2w5q No score
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing...
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
- Record
GHSA-38pf-hw2h-2w5q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0176 is a medium vulnerability (CVSS 4.6) in Avaya Libsafe, published April 22, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. No source names a fixed version.