elfutils project elfutils

Name: elfutils project elfutils
Brand: elfutils project

productUS

cpe:2.3:a:elfutils_project:elfutils:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high27medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-9447US	medium6.4	5.02% (92nd)	—	no fix	2015-01-02	2 versions
CVE-2014-0172US	medium6.8	4.03% (91st)	—	no fix	2014-04-11	6 versions
CVE-2018-16402US	critical9.8	3.69% (90th)	—	no fix	2018-09-03	= 0.173
CVE-2018-18520US	medium6.5	2.79% (86th)	—	no fix	2018-10-19	≤ 0.174
CVE-2017-7608US	medium5.5	2.13% (82nd)	—	no fix	2017-04-09	= 0.168
CVE-2019-7149US	medium6.5	1.97% (80th)	—	no fix	2019-01-29	= 0.175
CVE-2017-7612US	medium5.5	1.75% (78th)	—	no fix	2017-04-09	= 0.168
CVE-2017-7611US	medium5.5	1.75% (78th)	—	no fix	2017-04-09	= 0.168
CVE-2017-7610US	medium5.5	1.75% (78th)	—	no fix	2017-04-09	= 0.168
CVE-2018-18521US	medium5.5	1.72% (77th)	—	no fix	2018-10-19	= 0.174
CVE-2017-7613US	medium5.5	1.70% (77th)	—	no fix	2017-04-09	= 0.168
CVE-2016-10255US	medium5.5	1.70% (77th)	—	no fix	2017-03-23	≤ 0.167
CVE-2017-7607US	medium5.5	1.70% (77th)	—	no fix	2017-04-09	= 0.168
CVE-2017-7609US	medium5.5	1.64% (76th)	—	no fix	2017-04-09	= 0.168
CVE-2018-16062US	medium5.5	1.63% (76th)	—	0.174	2018-08-29	< 0.174
CVE-2019-7148US	medium6.5	1.60% (76th)	—	no fix	2019-01-29	= 0.174
CVE-2016-10254US	medium5.5	1.57% (75th)	—	no fix	2017-03-23	≤ 0.167
CVE-2019-7146US	medium5.5	1.52% (74th)	—	no fix	2019-01-29	= 0.175
CVE-2018-18310US	medium5.5	1.35% (71st)	—	no fix	2018-10-15	≤ 0.174
CVE-2019-7150US	medium5.5	1.33% (71st)	—	no fix	2019-01-29	= 0.175
CVE-2019-7665US	medium5.5	1.26% (69th)	—	no fix	2019-02-09	= 0.175
CVE-2018-16403US	medium5.5	1.12% (66th)	—	no fix	2018-09-03	= 0.173
CVE-2019-7664US	medium5.5	1.02% (63rd)	—	no fix	2019-02-09	= 0.175
CVE-2018-8769US	high7.8	0.84% (58th)	—	no fix	2018-03-18	= 0.170
CVE-2025-1352US	high7.5	0.66% (52nd)	—	no fix	2025-02-16	= 0.192
CVE-2025-1372US	high7.8	0.35% (28th)	—	no fix	2025-02-17	= 0.192
CVE-2025-1365US	high7.8	0.34% (28th)	—	no fix	2025-02-17	= 0.192
CVE-2021-33294US	medium5.5	0.33% (27th)	—	no fix	2023-07-18	= 0.183
CVE-2025-1377US	medium5.5	0.33% (26th)	—	no fix	2025-02-17	= 0.192
CVE-2025-1376US	medium4.7	0.31% (24th)	—	no fix	2025-02-17	= 0.192
CVE-2024-25260US	—	0.31% (23rd)	—	no fix	2024-02-20	= 0.189
CVE-2020-21047US	medium5.5	0.25% (16th)	—	no fix	2023-08-22	= 0.177
CVE-2025-1371US	medium5.5	0.23% (14th)	—	no fix	2025-02-17	= 0.192

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read13 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer12 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan