OSV-2025-74

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxml2/OSV-2025-74.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-74
Published
2025-01-29T00:13:55.386256Z
Modified
2025-01-29T00:13:55.386629Z
Summary
Stack-buffer-overflow in xmlValidateElementContent
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=392687022

Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
xmlValidateElementContent
xmlValidateOneElement
xmlValidateElement
References

Affected packages

OSS-Fuzz / libxml2

Package

Name
libxml2
Purl
pkg:generic/libxml2

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/GNOME/libxml2.git
Events
Introduced
971ce40409978809a202ff4f6f684055ed8184fe
Fixed
22ada0a0bfd92961acb257deae5e7045aaf12d08

Affected versions

v2.*
v2.13.0
v2.13.1
v2.13.2
v2.13.3
v2.13.4
v2.13.5
v2.13.6

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"06b3965086a3954da467f88dc8bce937ecd71380:22ada0a0bfd92961acb257deae5e7045aaf12d08"
introduced_range 
"20b0bd9800ae83cbd70f4407ce67058164e16227:f506ec66547ef9bac97a2bf306d368ecea8c0c9e"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxml2/OSV-2025-74.yaml"