CVE-2026-110604 Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()

🗓️ 14 Oct 2026 14:16:44Reported by GoogleType

osv_cve🔗 osv.dev👁 8 Views

Stack out-of-bounds write in Mini-XML mxml_strtod() allows memory corruption or DoS.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-110604	14 Oct 202619:17	–	circl
CVE	CVE-2026-110604	14 Oct 202614:16	–	cve
Cvelist	CVE-2026-110604 Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()	14 Oct 202614:16	–	cvelist
EUVD	EUVD-2026-101232	14 Oct 202614:16	–	euvd
Mend	CVE-2026-110604	14 Oct 202614:16	–	mend
NVD	CVE-2026-110604	14 Oct 202615:17	–	nvd
Positive Technologies	PT-2026-114046	14 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-110604: Off-by-one Error	14 Oct 202600:00	–	rapid7
RedhatCVE	CVE-2026-110604	15 Oct 202619:33	–	redhatcve
UbuntuCve	CVE-2026-110604	15 Oct 202600:00	–	ubuntucve

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110604.json
hackmd	www.hackmd.io/@haind-pwn/mxml-strtod-locale-stack-overflow
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-110604
vulncheck	www.vulncheck.com/advisories/mini-xml-4.0.0-through-4.0.6-stack-out-of-bounds-write-via-mxml-strtod
github	www.github.com/michaelrsweet/mxml/commit/367c7ddd3387f65e867d776216de274bcaa3dae1
github	www.github.com/michaelrsweet/mxml
github	www.github.com/michaelrsweet/mxml/blob/v4.0.6/mxml-file.c
hackmd	www.hackmd.io/@haind-pwn/cve-2026-110604-mxml-strtod-locale-stack-overflow

16 Oct 2026 07:07Current

5.9Medium risk

Vulners AI Score5.9

CVSS 42

EPSS0.0022

Mini-XML mxml_strtod()out-of-bounds write memory corruption DoS