busybox vulnerabilities
21 published CVEs name busybox among the affected products.
- Published CVEs
- 21
- Last 12 months
- 5
- Critical
- 1
- Known exploited
- 0
Critical 1High 9Medium 7Low 4Not scored 0
CVEs per yearBy the year they were published
- 202114
- 20252
- 20265
Newest CVEs
- CVE-2026-92205
BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
BusyBox · BusyBox
Medium6.1 - CVE-2026-38755
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted…
BusyBox · BusyBox
Low2.9 - CVE-2026-38754
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
BusyBox · BusyBox
Medium5.1 - CVE-2026-38753
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK…
BusyBox · BusyBox
Medium4.9 - CVE-2026-38752
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a…
BusyBox · BusyBox
Low2.9 - CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
BusyBox · BusyBox
Low3.2 - CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a…
BusyBox · BusyBox
Low2.5 - CVE-2021-42386
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function
busybox · busybox
High7.2 - CVE-2021-42385
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
busybox · busybox
High7.2 - CVE-2021-42384
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special…
busybox · busybox
High7.2