PatchTheCVE: filehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-2799: Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including Thehttps://patchthecve.com/cve/CVE-2007-2799.htmlhttps://patchthecve.com/cve/CVE-2007-2799.htmlTue, 16 Jun 2026 22:40:27 +0000MEDIUM 5.1: Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incoCVE-2007-1536: Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackershttps://patchthecve.com/cve/CVE-2007-1536.htmlhttps://patchthecve.com/cve/CVE-2007-1536.htmlTue, 16 Jun 2026 22:37:46 +0000HIGH 9.3: Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.CVE-2004-1304: Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbhttps://patchthecve.com/cve/CVE-2004-1304.htmlhttps://patchthecve.com/cve/CVE-2004-1304.htmlTue, 16 Jun 2026 22:07:25 +0000HIGH 10.0: Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.CVE-2003-0102: Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as thehttps://patchthecve.com/cve/CVE-2003-0102.htmlhttps://patchthecve.com/cve/CVE-2003-0102.htmlTue, 16 Jun 2026 22:01:31 +0000MEDIUM 4.6: Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).