libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.
Metrics
Affected Vendors & Products
References
History
Wed, 17 Dec 2025 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-122 | |
| Metrics |
cvssV3_1
|
Fri, 11 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-12-17T22:10:56.955Z
Reserved: 2017-05-18T00:00:00.000Z
Link: CVE-2017-9050
Updated: 2024-08-05T16:55:21.957Z
Status : Deferred
Published: 2017-05-18T06:29:00.497
Modified: 2025-12-17T23:15:47.153
Link: CVE-2017-9050
OpenCVE Enrichment
No data.