https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-9011.htmlhttps://patchthecve.com/cve/CVE-2016-9011.htmlWed, 17 Jun 2026 00:55:17 +0000MEDIUM 5.5: The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.https://patchthecve.com/cve/CVE-2015-4696.htmlhttps://patchthecve.com/cve/CVE-2015-4696.htmlWed, 17 Jun 2026 00:27:44 +0000MEDIUM 4.3: Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.https://patchthecve.com/cve/CVE-2015-4695.htmlhttps://patchthecve.com/cve/CVE-2015-4695.htmlWed, 17 Jun 2026 00:27:44 +0000MEDIUM 5.0: meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.https://patchthecve.com/cve/CVE-2015-4588.htmlhttps://patchthecve.com/cve/CVE-2015-4588.htmlWed, 17 Jun 2026 00:27:33 +0000MEDIUM 6.8: Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.https://patchthecve.com/cve/CVE-2015-0848.htmlhttps://patchthecve.com/cve/CVE-2015-0848.htmlWed, 17 Jun 2026 00:21:01 +0000MEDIUM 6.8: Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.