Aggregates CVE and security vulnerability intelligence across all libxsmm_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk memory corruption and vendor risk buffer overflow and related security problems, affecting vendor surface production workloads and vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-39536 | An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow. | [email protected] | 8.8 | 1.03% | 2021-09-20 | 2026-06-17 |
| CVE-2021-39535 | An issue was discovered in libxsmm through v1.16.1-93. A NULL pointer dereference exists in JIT code. It allows an attacker to cause Denial of Service. | [email protected] | 6.5 | 0.83% | 2021-09-20 | 2026-06-17 |
| CVE-2018-20543 | There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service. | [email protected] | 6.5 | 1.05% | 2018-12-28 | 2026-06-16 |
| CVE-2018-20542 | There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address). | [email protected] | 8.8 | 1.91% | 2018-12-28 | 2026-06-16 |
| CVE-2018-20541 | There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses). | [email protected] | 8.8 | 1.92% | 2018-12-28 | 2026-06-16 |