uclibc-ng project uclibc-ng

Name: uclibc-ng project uclibc-ng
Brand: uclibc-ng project

productUS

cpe:2.3:a:uclibc-ng_project:uclibc-ng:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical3high1medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-30295US	medium6.5OT elevated	11.2% (96th)	—	no fix	2022-05-06	≤ 1.0.40
CVE-2021-43523US	critical9.6	3.07% (88th)	—	1.0.39	2021-11-10	< 1.0.39
CVE-2016-2224US	high7.5	2.80% (86th)	—	no fix	2017-03-24	≤ 1.0.11
CVE-2016-6264US	high7.5	2.66% (86th)	—	1.0.16	2017-01-27	< 1.0.16
CVE-2016-2225US	high7.5	2.45% (84th)	—	no fix	2017-03-24	≤ 1.0.11
CVE-2021-27419US	critical9.8	1.72% (77th)	—	1.0.37	2022-05-03	< 1.0.37
CVE-2022-29503US	critical9.8	1.31% (71st)	—	no fix	2022-09-29	= 1.0.40

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-195Signed to Unsigned Conversion Error1 CVEs
CWE-330Use of Insufficiently Random Values1 CVEs
CWE-350Reliance on Reverse DNS Resolution for a Security-Critical Action1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.