CVE-2017-18926

CVE-2017-18926 affects Raptor RDF Syntax Library 2.0.15, where raptor_xml_writer_start_element_common miscalculates the maximum number of XML namespace declarations, causing heap-based buffer overflows (observed with raptor_qname_format_as_xml). The connected Nessus advisories show the issue impa...

CVE-2020-25713

CVE-2020-25713 affects the Raptor RDF libraries (raptor2) with a flaw in raptor_xml_writer_start_element_common: a malformed input file can trigger an out-of-bounds array access, causing a segfault. Public sources (Arch Linux ASA-202011-20) describe this alongside CVE-2017-18926 as part of raptor...

CVE-2024-57823

CVE-2024-57823 affects the Raptor RDF Syntax Library up to version 2.0.16, with an integer underflow when normalizing a URI in the turtle parser (raptor_uri_normalize_path). Connected advisories/plug-ins confirm impact on raptor2 across multiple vendor releases and indicate fixes in downstream se...

CVE-2024-57822

CVE-2024-57822 affects the Raptor2 RDF parser (Raptor RDF Syntax Library) up to version 2.0.16. The issue is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(), which can lead to memory access errors/crashes. Connected advisories con...