GNU libextractor

2 known vulnerabilities in GNU libextractor, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-100310 CVSS 7.3 high GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environment variable without…
CVE-2026-91752 CVSS 8.7 high GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a…