OSV-2023-1303

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-1303

Published

2023-12-15T00:00:06.313566Z

Modified

2023-12-15T00:00:06.314002Z

Summary

Heap-use-after-free in htmlCurrentChar

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65043

Crash type: Heap-use-after-free READ 1
Crash state:
htmlCurrentChar
htmlParseComment
htmlParseDocument

References

Affected packages

Type: GIT
Repo: https://gitlab.gnome.org/GNOME/libxml2.git
Events: Introduced

8e13133dbd2c10e8a498235a62f9beceb19b87a1

Fixed

69d88566b6063b6e11f473fccddaa0174b60d6a6

{
    "severity": "HIGH"
}