CVE-2024-56171 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit…
High CVSS: 7.8

CVE-2024-56171

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
Vendor
Xmlsoft
Product
Libxml2
CWE
CWE-416
Yayın Tarihi
2025-02-18 22:15:12
Güncelleme
2025-11-03 21:17:50
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-416 Libxml2 HIGH Xmlsoft 2025

Referanslar

https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 http://seclists.org/fulldisclosure/2025/Apr/10 http://seclists.org/fulldisclosure/2025/Apr/11 http://seclists.org/fulldisclosure/2025/Apr/12 http://seclists.org/fulldisclosure/2025/Apr/13 http://seclists.org/fulldisclosure/2025/Apr/4 http://seclists.org/fulldisclosure/2025/Apr/5 http://seclists.org/fulldisclosure/2025/Apr/8 http://seclists.org/fulldisclosure/2025/Apr/9 https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html https://security.netapp.com/advisory/ntap-20250328-0010/