CyberSecBulletin

Enlightenment vulnerabilities

We track 2 vulnerabilities in Enlightenment products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2024.

2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score

Latest Enlightenment vulnerabilities

  • 8.8 High severity

    Imlib2: Out-of-bounds Write

    CVE-2024-25447Enlightenment

    An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.

  • 7.8 High severity

    Enlightenment: Improper Privilege Management

    CVE-2022-37706EnlightenmentEPSS 6.01%

    enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.