<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: libtorrent</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-9847: The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (</title><link>https://patchthecve.com/cve/CVE-2017-9847.html</link><guid>https://patchthecve.com/cve/CVE-2017-9847.html</guid><pubDate>Wed, 17 Jun 2026 01:29:02 +0000</pubDate><description>MEDIUM 5.5: The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.</description></item><item><title>CVE-2016-7164: The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of ser</title><link>https://patchthecve.com/cve/CVE-2016-7164.html</link><guid>https://patchthecve.com/cve/CVE-2016-7164.html</guid><pubDate>Wed, 17 Jun 2026 00:52:42 +0000</pubDate><description>HIGH 7.5: The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.</description></item><item><title>CVE-2016-5301: The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of servic</title><link>https://patchthecve.com/cve/CVE-2016-5301.html</link><guid>https://patchthecve.com/cve/CVE-2016-5301.html</guid><pubDate>Wed, 17 Jun 2026 00:49:10 +0000</pubDate><description>HIGH 7.5: The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.</description></item></channel></rss>