libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write...