Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/kodi@2:21.2%2Bdfsg-4?distro=trixie
purl pkg:deb/debian/kodi@2:21.2%2Bdfsg-4?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-1jy3-92d8-ebf3 Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream. CVE-2021-42917
VCID-5qx5-u16v-vfgz Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8366
VCID-becr-7kfy-c7ep A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file. CVE-2023-30207
VCID-car8-7w1p-2uhx Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8367
VCID-nak9-smbh-37et Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd. CVE-2017-5982
VCID-saex-9ka8-c7en Multiple vulnerabilities have been found in Kodi, the worst of which could allow remote attackers to execute arbitrary code. CVE-2017-8314
VCID-uwjm-15ym-1kfc A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. CVE-2018-8831
VCID-xswq-6aae-nqfb A buffer overflow in DCRaw might allow remote attackers to cause a Denial of Service condition. CVE-2015-3885
VCID-z9v6-3q7k-zkg4 A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument. CVE-2023-23082

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:10:09.359738+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:56:29.364457+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:54:11.394279+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:16:37.563657+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:05:16.643287+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:45:39.334404+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:07:00.150063+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:20:42.168892+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:52:43.211243+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:03:37.271059+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:53:18.518390+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:51:31.437822+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:23:45.473133+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:47.977035+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:16:41.460011+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:47:35.682421+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:14:33.448487+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:57:34.144119+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:06.718200+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.659595+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.600012+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.549720+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.508431+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.457852+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.407823+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.366310+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.324386+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.1.0