CVE-2009-3575: Tatsuhiro Tsujikawa ARIA2

High severity, CVSS 10.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Affected products

• Tatsuhiro Tsujikawa ARIA2: version 0.15.3 only; version 1.2.0 only

Published 2009-10-07. Last modified 2026-06-16.