📄 libxslt xmlFreeID Use-After-Free

libxslt suffers from a heap use-after-free vulnerability in xmlFreeID caused by atype corruption. Vulnerability details In xsltutils.c: int xsltSetSourceNodeFlagsxsltTransformContextPtr ctxt, xmlNodePtr node, int flags if node-doc == ctxt-initialContextDoc ctxt-sourceDocDirty = 1; switch node-typ...

OSV-2024-103 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66679 Crash type: Heap-use-after-free READ 4 Crash state: xmlRemoveID xmlFreeProp xmlFreeNode...

PT-2024-40561 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

OSV-2024-81 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66502 Crash type: Heap-use-after-free READ 4 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

PT-2024-40848

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported, involving the functions xmlRemoveID, xmlFreeProp, and xmlFreeNodeList. Recommendations At the moment,...

OSV-2024-77 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66446 Crash type: Heap-use-after-free READ 8 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

PT-2024-40841 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the xmlRemoveID, xmlFreeProp, and xmlFreeNodeList functions. Recommendations: A...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeProp

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5760819097370624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIMFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000e7 Crash...

libxslt:xslt: Invalid-free in xmlFreeProp

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=4769079506894848 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzerasanlibxslt Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000005ed Crash State...

libxml2:xml: Invalid-free in xmlFreeProp

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5805533850894336 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xml Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Invalid-free Crash Address: 0x619000000ff8 Crash State: xmlFreeProp...