Aria2 version up to 1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. This CVE was published on 2026-08-25T21:17:45.830Z and was last modified on 2026-08-31T16:19:11.373Z. The vulnerability is classified as Medium severity with a CVSS score of 4. Affected systems may experience potential crashes or code execution if exploited. Organizations and individuals using aria2 ve [truncated]
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to cause a Denial of Service. This vulnerability requires verification of exposure and potential impact, particularly for defenders responsible for systems using Aria2 version 1.37.0 or below. The issue is caused by a divide-by-zero error in the bittorrent_helper.cc file, [truncated]