Libical Project

Libical is a widely embedded calendar and scheduling library that, despite a narrow product scope, sits deep in mail clients, calendar applications, and groupware systems across many platforms. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur through memory-safety weakness classes such as out-of-bounds reads and use-after-free conditions that reflect the parsing complexity of iCalendar format handling. Defenders should inventory applications that depend on this library and prioritize updates, since a single flaw can propagate across every downstream product that links it; live severity and exploitation figures are shown alongside this summary.