Research Article

VulMPFF: A Vulnerability Detection Method for Fusing Code Features in Multiple Perspectives

Table 7

Some of the vulnerabilities detected by VulMPFF in the open-source project.

ProjectCVEIDVulnerable file in the target productRelease dateVulnerability type

Linux-4.20-rc6CVE-2021-43975drivers/net/ethernet/aquantia/atlantic/hw atl/hw atl utils.c2021-11-17CWE-787
CVE-2023-28772lib/seq buf.c2023-03-23CWE-120

Libav-12.3CVE-2018-19128libavcodec/lcldec.c2018-11-09CWE-125
CVE-2019-14443libavcodec/apedec.c2019-07-30CWE-369

Qemu-4.2.0CVE-2021-20203hw/net/vmxnet3.c2021-02-25CWE-190
CVE-2021-3507hw/block/fdc.c2021-05-06CWE-119 CWE-787

OpenSSL-3.0.4CVE-2023-0401crypto/pkcs7/pk7_doit.c2023-02-08CWE-476
CVE-2022-2274crypto/bn/rsaz_exp_x2.c2022-07-01CWE-787

FFmpeg-n6.0CVE-2020-35965libavcodec/exr.c2021-01-04CWE-787
CVE-2018-1999011libavformat/asfdec_o.c2018-07-23CWE-119