CVE-2023-28484Medium· 6.5▾ SunlitIn libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
libxml2 < 2.10.4debian_linux = 10.0Upgrade past the affected range:
libxml2 2.10.4Connected by shared product, vendor, weakness, or advisory.
CVE-2023-39615Medium· 6.5Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c
CVE-2023-29469Medium· 6.5An issue was discovered in libxml2 before 2.10.4
CVE-2022-40303High· 7.5An issue was discovered in libxml2 before 2.10.3
CVE-2022-40304High· 7.8An issue was discovered in libxml2 before 2.10.3
CVE-2021-3537Medium· 5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
CVE-2018-14404Medium· 6.5A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case