CVE-2024-40896

The libxml2 library (versions 2.11 before 2.11.9 , 2.12 before 2.12.9 , and 2.13 before 2.13.3 ) contains a vulnerability in its SAX parser . The parser can produce events for external entities even when custom SAX handlers attempt to override entity content by setting the "checked" flag. This fl...

CVE-2024-25062

CVE-2024-25062 : Affects libxml2 prior to 2.11.7 and 2.12.x prior to 2.12.5. When using the XML Reader with DTD validation and XInclude expansion, crafted XML can trigger an xmlValidatePopElement use-after-free, as described in multiple connected sources. Impact is described as an availability co...

CVE-2024-34459

A buffer over-read vulnerability exists in xmllint (part of libxml2 ) affecting versions before 2.11.8 and 2.12.x before 2.12.7 . The root cause is a formatting error when using the xmllint --htmlout option, which can lead to an over-read in xmlHTMLPrintFileContext within xmllint.c . This issue i...