Use-After-Free Vulnerability in Libevent Library Affects Multiple Versions
CVE-2026-63381
5.8MEDIUM
What is CVE-2026-63381?
The Libevent library, an essential tool for event notification, suffers from a critical flaw involving a use-after-free condition in the function handling buffer operations. When processing an output buffer with a length of zero, memory corruption can occur due to improper management of buffer references, leading to potential crashes of applications that utilize this library. This vulnerability, found in versions prior to 2.1.13 and 2.2.2-alpha, underscores the importance of upgrading to the latest versions to ensure application stability and security.
Affected Version(s)
libevent >= 2.2.0-alpha, < 2.2.2-alpha < 2.2.0-alpha, 2.2.2-alpha
libevent < 2.1.13 < 2.1.13