boost CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

boost vulnerability overview

Aggregates CVE and security vulnerability intelligence across all boost-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Disclosed issues often relate to vendor risk input validation, vendor risk buffer overflow, and vendor risk denial of service; exposure may include vendor impact unexpected behavior in vendor surface software deployment contexts.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2016-9840 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. [email protected] 8.8 4.79% 2017-05-23 2026-05-13
CVE-2013-0252 boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes. [email protected] 5.0 2.87% 2013-03-12 2026-04-29
CVE-2012-2677 Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected. [email protected] 5.0 3.89% 2012-07-25 2026-04-29
CVE-2008-0172 The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression. [email protected] 5.0 1.96% 2008-01-17 2026-04-23
CVE-2008-0171 regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression. [email protected] 5.0 2.69% 2008-01-17 2026-04-23
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence