Libical: Heap-buffer-overflow
Affects libicalSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 130581f5cdb6501da8533b7bd3cae92eb01ea18a
Data as of 4 Nov 2026, 19:17 UTC
What to do
Upgrade libical to 130581f5cdb6501da8533b7bd3cae92eb01ea18a.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzlibicalpkg:generic/libicalOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been applied in the commit 130581f5cdb6501da8533b7bd3cae92eb01ea18a. Users and maintainers of libical should update to the fixed version to remediate this vulnerability.
Description
A heap-buffer-overflow vulnerability exists in the libical library within the function icalmemory_tmp_copy, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds memory writes during processing of certain input strings. The issue has been fixed in a specific commit identified by the hash 130581f5cdb6501da8533b7bd3cae92eb01ea18a.