📄 libxslt xmlFreeID Use-After-Free

libxslt suffers from a heap use-after-free vulnerability in xmlFreeID caused by atype corruption. Vulnerability details In xsltutils.c: int xsltSetSourceNodeFlagsxsltTransformContextPtr ctxt, xmlNodePtr node, int flags if node-doc == ctxt-initialContextDoc ctxt-sourceDocDirty = 1; switch node-typ...

OSV-2024-103 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66679 Crash type: Heap-use-after-free READ 4 Crash state: xmlRemoveID xmlFreeProp xmlFreeNode...

PT-2024-40561 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

OSV-2024-81 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66502 Crash type: Heap-use-after-free READ 4 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

OSV-2024-77 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66446 Crash type: Heap-use-after-free READ 8 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

PT-2024-40841 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the xmlRemoveID, xmlFreeProp, and xmlFreeNodeList functions. Recommendations: A...