UBUNTU-CVE-2024-58392: Medium severity ubuntu/libphysfs vulnerability
Published Nov 9, 2026
·Updated
(PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability i ...)
Affected Software
7 affected components
ubuntu/libphysfs*
ubuntu/libphysfs*
ubuntu/libphysfs*
ubuntu/libphysfs*
ubuntu/libphysfs*
ubuntu/libphysfs*
ubuntu/libphysfs*
Event History
Nov 9, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access and interaction are required for exploitation?
The CVSS vector indicates that exploitation requires local access and user interaction. No privileges are required.
2
Which versions should be treated as affected?
PhysicsFS versions through 3.2.0 are identified as containing the out-of-bounds read vulnerability. Check the version of libphysfs installed on the Ubuntu system.