Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/kodi@2:21.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/kodi@2:21.3%2Bdfsg-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-1jy3-92d8-ebf3 Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream. CVE-2021-42917
VCID-5qx5-u16v-vfgz Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8366
VCID-becr-7kfy-c7ep A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file. CVE-2023-30207
VCID-car8-7w1p-2uhx Multiple vulnerabilities have been found in LibRaw, the worst of which may allow attackers to execute arbitrary code. CVE-2015-8367
VCID-nak9-smbh-37et Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd. CVE-2017-5982
VCID-saex-9ka8-c7en Multiple vulnerabilities have been found in Kodi, the worst of which could allow remote attackers to execute arbitrary code. CVE-2017-8314
VCID-uwjm-15ym-1kfc A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist. CVE-2018-8831
VCID-xswq-6aae-nqfb A buffer overflow in DCRaw might allow remote attackers to cause a Denial of Service condition. CVE-2015-3885
VCID-z9v6-3q7k-zkg4 A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument. CVE-2023-23082

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:10:09.365989+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:56:29.370594+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:54:11.398868+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:16:37.568479+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:05:16.648164+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:45:39.341183+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:07:00.156950+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:20:42.175159+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:52:43.217139+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:03:37.277103+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:53:18.525309+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:51:31.443992+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:23:45.475747+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:47.985777+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:16:41.466283+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:47:35.689325+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:14:33.455227+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:57:34.150505+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:06.710034+00:00 Debian Importer Fixing VCID-becr-7kfy-c7ep https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.651384+00:00 Debian Importer Fixing VCID-z9v6-3q7k-zkg4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.591943+00:00 Debian Importer Fixing VCID-1jy3-92d8-ebf3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.542941+00:00 Debian Importer Fixing VCID-uwjm-15ym-1kfc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.500231+00:00 Debian Importer Fixing VCID-saex-9ka8-c7en https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.449671+00:00 Debian Importer Fixing VCID-nak9-smbh-37et https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.400680+00:00 Debian Importer Fixing VCID-car8-7w1p-2uhx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.359483+00:00 Debian Importer Fixing VCID-5qx5-u16v-vfgz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:28:06.315258+00:00 Debian Importer Fixing VCID-xswq-6aae-nqfb https://security-tracker.debian.org/tracker/data/json 38.1.0