01 Record

CVE-2026-63383

Libevent: decode_tag_internal() can lead to out-of-bounds read

HighPUBLISHEDCNA: GitHub_M

Base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

Libevent: decode_tag_internal() can lead to out-of-bounds read

Published

2026-08-20 17:48Z1 DAY AGO

Last updated

2026-08-20 18:41Z1 DAY AGO

Reserved

2026-07-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.7)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationpocAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

a78e008cf5b1ac0922b14804d40505d76b26d890ea35ac6bb4e19edb67bd9ea1

VendorProductVersionsPlatforms

libeventlibevent>= 2.2.0-alpha, < 2.2.2-alpha, < 2.1.13—