Librdf
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Librdf product.
RSS Feeds for Librdf security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Librdf products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Librdf Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 1 vulnerability in Librdf with an average score of 7.1 out of ten. Last year, in 2025 Librdf had 2 security vulnerabilities published. Right now, Librdf is on track to have less security vulnerabilities in 2026 than it did last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.45.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 7.10 |
| 2025 | 2 | 6.65 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 1 | 6.50 |
| 2020 | 1 | 0.00 |
It may take a day or so for new Librdf vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Librdf Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2025-71436 | Oct 20, 2026 |
Heap Overflow in Raptor RDF Syntax Library 2.0.152.0.16 via long lang tagsRaptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code. |
Raptor Rdf Syntax Library
|
| CVE-2024-57822 | Jan 10, 2025 |
Raptor RDF Syntax Lib <=2.0.16: heap-based buffer over-read in nquads parserIn Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(). |
Raptor Rdf Syntax Library
|
| CVE-2024-57823 | Jan 10, 2025 |
Raptor RDF Syntax Library <=2.0.16: Integer Underflow in raptor_uri_normalize_pathIn Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path(). |
Raptor Rdf Syntax Library
|
| CVE-2020-25713 | May 13, 2021 |
A malformed input fileA malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common. |
Raptor Rdf Syntax Library
|
| CVE-2017-18926 | Nov 06, 2020 |
raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writerraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml). |
Raptor Rdf Syntax Library
|
| CVE-2012-0037 | Jun 17, 2012 |
Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other productsRedland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document. |
Raptor
|