CVE-2022-40304

HIGH · 7.8 CVSS Gepubliceerd: 23-11-2022 CWE-415

Beschrijving

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Vendors

Xmlsoft Netapp Apple

Affected products

Libxml2 Active Iq Unified Manager Clustered Data Ontap Clustered Data Ontap Antivirus Connector Manageability Software Development Kit Smi-s Provider Snapmanager H300s Firmware H300s H500s Firmware H500s H700s Firmware H700s H410s Firmware H410s H410c Firmware H410c Ipados Iphone Os Macos Tvos Watchos

Beschrijving

Vendors

Affected products

References