The R Project R
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-27322 | 1.4.0 – < 4.4.0 | Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not includ | HIGH 8.8 | 23 % | ||
| CVE-2016-8714 | 3.3.0 ; 3.3.2 | An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A special | HIGH 8.8 | 2.4 % |