Skip to content
OpenAdvisories

Package · Debian

libyang2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-115327

    libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser

    libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via l…

    CESNET libyang libyang libyang Debian Ubuntu
  • Medium 6.5
    CVE-2026-41401

    libyang - Heap Use-After-Free Write in XML Metadata Parsing

    libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted…

    libyang libyang libyang libyang Debian Ubuntu