CyberSecBulletin

Pocoproject vulnerabilities

We track 2 vulnerabilities in Pocoproject products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2025.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest Pocoproject vulnerabilities

  • 7.0 High severity

    Poco: Use of a Broken or Risky Cryptographic Algorithm

    CVE-2025-45766Pocoproject

    poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and

  • 9.8 Critical severity

    Poco: Integer Overflow or Wraparound

    CVE-2023-52389Pocoproject

    UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80