p PatchFirst

PatchFirst · Latest vulnerabilities

libyang vulnerabilities

Vulnerabilities published for libyang in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-41401

    Medium · CVSS 6.9EPSS 0.67%Fix available

    libyang - Heap Use-After-Free Write in XML Metadata Parsing

    libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.

    libyangOperating systems
    • Update to 3.13.5-2ubuntu0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →