CVE-2022-40303
Beschrijving
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Vendors
Affected products
References
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- gitlab.gnome.org
- gitlab.gnome.org
- security.netapp.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- cert-portal.siemens.com