Libextractor

This hub aggregates every CVE we track for Libextractor, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Libextractor.

• CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE27.5Sep 15, 2026
• CVE-2019-15531GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.6.5Aug 23, 2019
• CVE-2018-20431GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.6.5Dec 24, 2018
• CVE-2018-20430GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.6.5Dec 24, 2018
• CVE-2018-16430GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.8.8Sep 4, 2018
• CVE-2018-14347GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).6.5Jul 17, 2018
• CVE-2018-14346GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).8.8Jul 17, 2018
• CVE-2017-17440GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Tracker), NSFE, S3M (Scream Tracker 3), SID...6.5Dec 6, 2017
• CVE-2017-15922In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c.5.5Oct 26, 2017
• CVE-2017-15602In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted...7.5Oct 18, 2017
• CVE-2017-15601In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.7.5Oct 18, 2017
• CVE-2017-15600In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.7.5Oct 18, 2017
• CVE-2017-15267In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.7.5Oct 11, 2017
• CVE-2017-15266In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.5.5Oct 11, 2017
• CVE-2006-2458Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor...4.0May 18, 2006