Libevent vulnerabilities

Products

• Libevent 10

Newest

• libevent Libevent: Null Pointer Dereference in `evws_new_session` CVE-2026-63380 5.7 MediumAugust 20, 2026
• libevent Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames CVE-2026-63495 Fix available 7.5 HighAugust 20, 2026
• libevent Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept CVE-2026-63388 Fix available 8.4 HighJuly 24, 2026
• libevent Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response CVE-2026-63387 Fix available 7.0 HighJuly 24, 2026
• libevent Libevent: HTTP header handling bugs create risk of access control bypass. CVE-2026-63385 Fix available 9.2 CriticalJuly 24, 2026
• libevent Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. CVE-2026-63384 Fix available 8.7 HighJuly 24, 2026
• libevent Libevent: decode_tag_internal() can lead to out-of-bounds read CVE-2026-63383 Fix available 8.7 HighJuly 24, 2026
• libevent libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling CVE-2026-63382 Fix available 9.2 CriticalJuly 24, 2026
• libevent Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` CVE-2026-63381 Fix available 5.8 MediumJuly 24, 2026
• libevent Libevent: HTTP Header smuggling CVE-2026-63379 Fix available 6.3 MediumJuly 24, 2026