https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-5827.htmlhttps://patchthecve.com/cve/CVE-2016-5827.htmlWed, 17 Jun 2026 00:50:06 +0000HIGH 7.5: The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.https://patchthecve.com/cve/CVE-2016-5826.htmlhttps://patchthecve.com/cve/CVE-2016-5826.htmlWed, 17 Jun 2026 00:50:06 +0000HIGH 7.5: The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.https://patchthecve.com/cve/CVE-2016-5825.htmlhttps://patchthecve.com/cve/CVE-2016-5825.htmlWed, 17 Jun 2026 00:50:05 +0000MEDIUM 5.5: The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.https://patchthecve.com/cve/CVE-2016-5824.htmlhttps://patchthecve.com/cve/CVE-2016-5824.htmlWed, 17 Jun 2026 00:50:05 +0000MEDIUM 5.5: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.https://patchthecve.com/cve/CVE-2016-5823.htmlhttps://patchthecve.com/cve/CVE-2016-5823.htmlWed, 17 Jun 2026 00:50:05 +0000MEDIUM 5.5: The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.https://patchthecve.com/cve/CVE-2016-9584.htmlhttps://patchthecve.com/cve/CVE-2016-9584.htmlWed, 17 Jun 2026 00:56:17 +0000CRITICAL 9.1: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.