/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-25062

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-25062

CGA ID

CGA-7734-x6rc-vg78

Severity

7.5

High

CVSS V3

Description

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

References

  • https://images.chainguard.dev/security/CGA-7734-x6rc-vg78

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images