Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 144

Export CSV
CVE-2025-32415

libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

CVSS 3.1 · 2.9 Low EPSS < 1% KEV · Not listed
Vendors
Xmlsoft
Products
Libxml2
CVE-2025-32414

libxml2: Out-of-Bounds Read in libxml2

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Enterprise Linux Libxml2
CVE-2015-9019

libxslt: math.random() in xslt uses unseeded randomness

In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.

CVSS 3.0 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Xmlsoft
Products
Libxslt
CVE-2016-4483

libxml2: out-of-bounds read

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

CVSS 3.1 · 7.5 High EPSS 6.0% KEV · Not listed
Vendors
Debian Oracle Redhat and 1 more
Products
Debian Linux Solaris Jboss Core Services and 1 more
CVE-2017-5969

libxml2: Null pointer dereference in xmlSaveDoc implementation

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.

CVSS 3.0 · 4.7 Medium EPSS 2.6% KEV · Not listed
Vendors
Xmlsoft
Products
Libxml2
CVE-2017-5029

chromium-browser: integer overflow in libxslt

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Apple Debian Google and 4 more
Products
Macos Debian Linux Android and 8 more
CVE-2016-1840

libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2014-3660

libxml2: denial of service via recursive entity expansion

parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Ubuntu Linux Debian Linux and 2 more
CVE-2015-1819

libxml2: denial of service processing a crafted XML document

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

CVSS 2.0 · 5.0 Medium EPSS 6.3% KEV · Not listed
Vendors
Apple Canonical Debian and 5 more
Products
Iphone Os Mac Os X Tvos and 9 more
CVE-2015-5312

libxml2: CPU exhaustion when processing specially crafted XML input

The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

CVSS 2.0 · 7.1 High EPSS 4.5% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 12 more
CVE-2015-6837

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Php Redhat Xmlsoft
Products
Php Rhel Software Collections Libxml2
CVE-2015-6838

php: NULL pointer dereference in XSLTProcessor class

The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.

CVSS 3.0 · 7.5 High EPSS 8.1% KEV · Not listed
Vendors
Php Redhat Xmlsoft
Products
Php Rhel Software Collections Libxml2
CVE-2015-7497

libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey

Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
Canonical Debian Hp and 2 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more
CVE-2015-7498

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
Canonical Debian Hp and 2 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more
CVE-2015-7499

libxml2: Heap-based buffer overflow in xmlGROW

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Iphone Os Mac Os X Tvos and 14 more
CVE-2015-7500

libxml2: Heap buffer overflow in xmlParseMisc

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 12 more
CVE-2015-7941

libxml2: Out-of-bounds memory access

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Redhat Xmlsoft
Products
Ubuntu Linux Enterprise Linux Jboss Enterprise Web Server and 1 more
CVE-2015-7942

libxml2: heap-based buffer overflow in xmlParseConditionalSections()

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

CVSS 2.0 · 6.8 Medium EPSS 4.5% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 8 more