libaec vulnerabilities

CVEs whose affected-version data names the libaec package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120457Medium· 5.3PoC

6d ago

libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to bypass a signed bounds check via an overlong fundamental sequence. Attackers can supply a crafted CCSDS 121.0/SZI…

▾ TwilightDeutsches Klimarechenzentrum · libaecEPSS 0.24%via CVEORG