CVE-2022-40304High· 7.8▾ TwilightAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 1.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
5.8%
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
libxml2 < 2.10.3active_iq_unified_managerclustered_data_ontapclustered_data_ontap_antivirus_connectormanageability_software_development_kitsmi-s_providersnapmanagerh300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareipados < 15.7.2iphone_os < 15.7.2macos >= 11.0, < 11.7.2macos >= 12.0, < 12.6.2tvos < 16.2watchos < 9.2Upgrade past the affected range:
libxml2 2.10.3ipados 15.7.2iphone_os 15.7.2macos 12.6.2tvos 16.2watchos 9.2Connected by shared product, vendor, weakness, or advisory.
CVE-2022-40303High· 7.5An issue was discovered in libxml2 before 2.10.3
CVE-2022-4450High· 7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g
CVE-2021-22945Critical· 9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
CVE-2022-29824Medium· 6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows
CVE-2022-23308High· 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2021-3541Medium· 6.5A flaw was found in libxml2