Skip to content
OpenAdvisories
High DSA-5524-1 1 CVE

libcue - security update

Published Oct 11, 2023 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 libcue 2.2.1-3+deb11u1
Debian · 12 libcue 2.2.1-4+deb12u1

Vulnerabilities 1

  • High 8.8
    CVE-2023-43641 EPSS 17%

    libcue vulnerable to out-of-bounds array access

    libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Becaus…