CVE-2017-15922: GNU Libextractor

Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extractor.c.

Affected products

• GNU Libextractor: version 1.4 only

Published 2017-10-26. Last modified 2026-06-17.