https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-9656.htmlhttps://patchthecve.com/cve/CVE-2019-9656.htmlWed, 17 Jun 2026 02:44:08 +0000HIGH 8.8: An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.https://patchthecve.com/cve/CVE-2017-14731.htmlhttps://patchthecve.com/cve/CVE-2017-14731.htmlWed, 17 Jun 2026 01:06:41 +0000MEDIUM 6.5: ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.https://patchthecve.com/cve/CVE-2017-2816.htmlhttps://patchthecve.com/cve/CVE-2017-2816.htmlWed, 17 Jun 2026 01:16:55 +0000HIGH 8.8: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.