Description (CNA)
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://sourceforge.net/p/ezxml/bugs/28/
- https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html
ADP enrichment
No English description supplied.