Libcaca
Vendor:
First CVE: Dec 28, 2018 · Active for 7 years
10
Total CVEs
More Total CVEs than 88% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libcaca over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 28, 2018
7 years ago
Most Recent CVE
Mar 10, 2022
1,597 days ago
CVE Severity & Scoring
Libcaca10 CVEs
20%
80%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (30.0%)
Network7 (70.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (10.0%)
Unknown0 (0.0%)
Required9 (90.0%)
Privileges Required
Low1 (10.0%)
High0 (0.0%)
None9 (90.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-20549HIGH There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. | Dec 28, 2018 | 8.8 | 28 | NO | NO |
CVE-2018-20548HIGH There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data. | Dec 28, 2018 | 8.8 | 28 | NO | NO |
CVE-2018-20545HIGH There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data. | Dec 28, 2018 | 8.8 | 28 | NO | NO |
CVE-2018-20546HIGH There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case. | Dec 28, 2018 | 8.1 | 27 | NO | NO |
CVE-2021-30499HIGH A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consequences. | May 27, 2021 | 7.8 | 26 | NO | NO |
CVE-2018-20547HIGH There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data. | Dec 28, 2018 | 8.1 | 26 | NO | NO |
CVE-2021-30498HIGH A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences. | May 26, 2021 | 7.8 | 25 | NO | NO |
CVE-2021-3410HIGH A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context | Feb 23, 2021 | 7.8 | 25 | NO | NO |
CVE-2022-0856MEDIUM libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service | Mar 10, 2022 | 6.5 | 23 | NO | NO |
CVE-2018-20544MEDIUM There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19. | Dec 28, 2018 | 6.5 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Libcaca
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 0.99 | 9 | 7.9 | 1.7% | 0 | 0 |