Skip to content

Vendor

libtins vulnerabilities

2 published CVES affecting libtins, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of libtins alerts

Products

Latest libtins CVEs

Newest publication first

  1. CVE-2026-112274 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init

    Published
    MediumCVSS 6.3 EPSS 0.52%

    libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer c...

  2. CVE-2026-112273 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

    Published
    MediumCVSS 6.9 EPSS 0.57%

    libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.