CVE-2016-9584: Libical Project Libical

Critical severity, CVSS 9.1. EPSS: 2.3% chance of exploitation in the next 30 days.

libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

Affected products

• Libical Project Libical: up to and including 2.0

Published 2017-01-18. Last modified 2026-06-17.