K16712298 : libxml2 vulnerability CVE-2016-1834

Security Advisory Description

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. (CVE-2016-1834)
Impact
A heap-based buffer overflow in xmlStrncat function allows remote attackers to execute arbitrary code or cause a denial of service (DoS) using a crafted XML document.