Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/kodi@2:19.1%2Bdfsg2-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/kodi@2:19.1%2Bdfsg2-2%2Bdeb11u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-1jy3-92d8-ebf3 Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream. CVE-2021-42917
VCID-5qx5-u16v-vfgz Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8366
VCID-becr-7kfy-c7ep A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file. CVE-2023-30207
VCID-car8-7w1p-2uhx Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8367
VCID-nak9-smbh-37et Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd. CVE-2017-5982
VCID-saex-9ka8-c7en Multiple vulnerabilities have been found in Kodi, the worst of which could allow remote attackers to execute arbitrary code. CVE-2017-8314
VCID-uwjm-15ym-1kfc A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. CVE-2018-8831
VCID-xswq-6aae-nqfb A buffer overflow in DCRaw might allow remote attackers to cause a Denial of Service condition. CVE-2015-3885
VCID-z9v6-3q7k-zkg4 A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument. CVE-2023-23082

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:10:09.347568+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:56:29.352025+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:54:11.385190+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:16:37.553806+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:05:16.633297+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:45:39.314012+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:07:00.136138+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:20:42.144090+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:52:43.187224+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:03:37.258954+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:53:18.504778+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:51:31.427286+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:23:45.467760+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:47.958315+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:16:41.441036+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:47:35.669390+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:14:33.421261+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:57:34.118402+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:06.693696+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.634178+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.583906+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.535866+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.492117+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.441597+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.393639+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.352735+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.305996+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.1.0