https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-9840.htmlhttps://patchthecve.com/cve/CVE-2016-9840.htmlThu, 08 Oct 2026 22:16:39 +0000HIGH 8.8: inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.https://patchthecve.com/cve/CVE-2013-0252.htmlhttps://patchthecve.com/cve/CVE-2013-0252.htmlTue, 16 Jun 2026 23:49:03 +0000MEDIUM 5.0: boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.https://patchthecve.com/cve/CVE-2012-2677.htmlhttps://patchthecve.com/cve/CVE-2012-2677.htmlTue, 16 Jun 2026 23:41:51 +0000MEDIUM 5.0: Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.