CVE-2024-34459

2024-05-1300:00:00

mitre

github.com

xmllint

buffer over-read

formatting error

AI Score

7.4

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:xmlsoft:xmllint:*:*:*:*:*:*:*:*"
    ],
    "vendor": "xmlsoft",
    "product": "xmllint",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.11.8",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.12.0",
        "lessThan": "2.12.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]