libmng vulnerabilities

CVEs whose affected-version data names the libmng package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112008Medium· 6.1PoC

1w ago

libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr

libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. …

▾ Twilightlibmng · libmngEPSS 0.14%via CVEORG