CVE-2023-39615Medium· 6.5▾ SunlitXmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. N…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.8%
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
libxml2 = 2.11.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-29469Medium· 6.5An issue was discovered in libxml2 before 2.10.4
CVE-2023-28484Medium· 6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault
CVE-2022-40303High· 7.5An issue was discovered in libxml2 before 2.10.3
CVE-2022-40304High· 7.8An issue was discovered in libxml2 before 2.10.3
CVE-2024-25062High· 7.5An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5
CVE-2023-45322Medium· 6.5libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails