Description (CNA)
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| xmlsoft / libxml2 | affected 0 before 2.15.4 |
CWE
CWE-190
References
- https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4
- https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4
ADP enrichment
No English description supplied.
No references supplied.