Westes' vulnerability profile centers on Flex, a lexical analyzer generator widely used in compiler and parser development, where disclosures reflect the memory-management and control-flow demands of code-generation tools. The recurring weakness classes involve buffer-boundary violations and uncontrolled recursion, which are structural risks inherent to parsing and tokenization workloads. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Westes over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-6354CRITICAL Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrar | Sep 21, 2016 | 9.8 | 34 | NO | NO |
CVE-2006-0459HIGH flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) t | Mar 29, 2006 | 7.5 | 22 | NO | NO |
CVE-2019-6293MEDIUM An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making | Jan 15, 2019 | 5.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Westes.
Media articles that mention a CVE ID that affects a product developed by Westes — matched by CVE ID, not by vendor name.