Cesnet Libyang vulnerabilities

• cesnet libyang libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser CVE-2026-115327 Fix available 6.0 MediumOctober 22, 2026
• cesnet libyang libyang - Heap Use-After-Free Write in XML Metadata Parsing CVE-2026-41401 Fix available 6.9 MediumMay 26, 2026
• cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more libyang: lyb_read_string() integer overflow → heap buffer overflow CVE-2026-44673 Fix available 7.5 HighMay 14, 2026
• cesnet libyang libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the... CVE-2023-26917 Fix available 7.5 HighApril 11, 2023
• cesnet libyang, fedoraproject fedora +1 more libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the... CVE-2023-26916 Fix available 5.3 MediumApril 3, 2023
• cesnet libyang In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval-... CVE-2021-28906 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can... CVE-2021-28905 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of... CVE-2021-28904 Fix available 7.5 HighMay 20, 2021
• cesnet libyang A stack overflow in libyang <= v1.0.225 can cause a denial of service through function... CVE-2021-28903 Fix available 7.5 HighMay 20, 2021
• cesnet libyang In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of... CVE-2021-28902 Fix available 7.5 HighMay 20, 2021
• cesnet libyang A NULL pointer dereference is present in libyang before v1.0-r3 in the function... CVE-2019-20398 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization... CVE-2019-20397 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern... CVE-2019-20396 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union... CVE-2019-20395 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type... CVE-2019-20394 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty... CVE-2019-20393 Fix available 8.8 HighJanuary 22, 2020
• cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r1 in the function... CVE-2019-20392 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r3 in the function... CVE-2019-20391 Fix available 6.5 MediumJanuary 22, 2020
• cesnet libyang, fedoraproject fedora, redhat enterprise linux +2 more In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... CVE-2019-19334 Fix available 8.1 HighDecember 6, 2019
• cesnet libyang, redhat enterprise linux +1 more In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way... CVE-2019-19333 Fix available 8.1 HighDecember 6, 2019