110 matches found
CVE-2026-112094
A security vulnerability has been detected in michaelrsweet mxml 4.0.5...
UBUNTU-CVE-2026-112094
A security vulnerability has been detected in michaelrsweet mxml 4.0.5...
CVE-2026-112094
A flaw was found in mxml. A remote attacker can exploit a use-after-free vulnerability by supplying specially crafted XML input processed by the mxmlloaddata function. This flaw can lead to memory corruption, causing a Denial of Service DoS through an application crash or potentially allowing...
Linux Distros Unpatched Vulnerability : CVE-2026-112094
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation...
DEBIAN-CVE-2026-112094
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094 michaelrsweet mxml mxml-file.c mxml_load_data use after free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094 michaelrsweet mxml mxml-file.c mxml_load_data use after free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094 michaelrsweet mxml mxml-file.c mxml_load_data use after free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
EUVD-2026-104113
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094
A use after free vulnerability exists in the michaelrsweet mxml library, specifically affecting versions 4.0.5 and 4.0.6 . The flaw is located within the mxml_load_data function in the mxml-file.c file. This vulnerability can be triggered remotely , and public exploits have been disclosed. Althou...
PT-2026-117263
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml load data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2026-112094: Use After Free
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxmlloaddata of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The...
PT-2026-114046
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml strtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
CVE-2026-88385
A flaw was found in mxml. A remote attacker could cause a Denial of Service DoS by supplying specially crafted, malformed XML data to an application utilizing the library. When handling parsing errors, the parser fails to release certain allocated text nodes, leading to a persistent memory leak o...
PT-2026-97931
Name of the Vulnerable Software and Affected Versions Mini-XML version 4.0.5 Description A memory leak occurs during the parsing of malformed XML. Specially crafted XML input can cause text nodes allocated by the mxmlNewText function to become unlinked before a parse error transfers control to th...
SUSE CVE-2026-5037
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...
Linux Distros Unpatched Vulnerability : CVE-2026-5037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing ...
EUVD-2026-16983
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...