OSV-2023-999

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-999

Published

2023-10-10T13:03:42.825694Z

Modified

2023-10-10T13:03:42.827194Z

Summary

Heap-buffer-overflow in xmlParseCommentComplex

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63127

Crash type: Heap-buffer-overflow WRITE 1
Crash state:
xmlParseCommentComplex
xmlParseComment
xmlParseMisc

References

Affected packages

Type: GIT
Repo: https://gitlab.gnome.org/GNOME/libxml2.git
Events: Introduced

8afd321abd2f75cf795f679b54333237b364d4d9

Fixed

4fc5340ec55a12cd6819395030d5d132a219984a

{
    "severity": "HIGH"
}