Skip to content

PatchFirst · Latest vulnerabilities

libphysfs vulnerabilities

Vulnerabilities published for libphysfs in the last 30 days: 1. Listed in the KEV catalogue: 0.

Vulnerabilities: 2

CVE-2024-58392
Medium · CVSS 4.8EPSS 0.17%No fix published
PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint
PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted archive with entry names ending in six-octet sequences, causing PHYSFS_utf8stricmp() and hashing to over-read and crash the application.
libphysfs Operating systems
Published October 14, 2026Updated October 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2005-2096
Not ratedEPSS 5.63%Fix available
CVE-2005-2096
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
libphysfs Operating systems
- Update to 1.0.0-5
Published July 6, 2005Updated July 14, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →