Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r2q6-6v35-773j

Опубликовано: 05 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.9

Описание

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

EPSS

Процентиль: 2%
0.00119
Низкий

6.9 Medium

CVSS3

Дефекты

CWE-192

Связанные уязвимости

CVSS3: 6.9
ubuntu
9 дней назад

(In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteC ...)

CVSS3: 6.9
redhat
11 дней назад

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

CVSS3: 6.9
nvd
11 дней назад

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

msrc
10 дней назад

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

CVSS3: 6.9
debian
11 дней назад

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteC ...

EPSS

Процентиль: 2%
0.00119
Низкий

6.9 Medium

CVSS3

Дефекты

CWE-192