PatchSiren

aria2 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM aria2 CVE published 2026-08-25

CVE-2026-75421

Aria2 version up to 1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. This CVE was published on 2026-08-25T21:17:45.830Z and was last modified on 2026-08-31T16:19:11.373Z. The vulnerability is classified as Medium severity with a CVSS score of 4. Affected systems may experience potential crashes or code execution if exploited. Organizations and individuals using aria2 ve [truncated]

MEDIUM aria2 CVE published 2026-08-24

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote malicious user to cause a Denial of Service. This vulnerability requires verification of exposure and potential impact, particularly for defenders responsible for systems using Aria2 version 1.37.0 or below. The issue is caused by a divide-by-zero error in the bittorrent_helper.cc file, [truncated]