CVE catalog
CVE-2023-23082
kodi: CVE-2023-23082
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.68% · Oct 25, 2026
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kodi | sid | 2:21.3+dfsg-2 | fixed |
| Debian | kodi | forky | 2:21.3+dfsg-1.3 | fixed |
| Debian | kodi | trixie | 2:21.2+dfsg-4 | fixed |
| Debian | kodi | bookworm | 2:20.1+dfsg-1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kodi | source | sid | 2:20.0+dfsg-2 | not yet assigned | Not reported | [1031048] |
| Debian | kodi | source | forky | 2:20.0+dfsg-2 | not yet assigned | Not reported | [1031048] |
| Debian | kodi | source | trixie | 2:20.0+dfsg-2 | not yet assigned | Not reported | [1031048] |
| Debian | kodi | source | bookworm | 2:20.0+dfsg-2 | not yet assigned | Not reported | [1031048] |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.