Filtered by vendor Xmlsoft Subscriptions
Filtered by product Xmllint Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-34459 1 Xmlsoft 2 Libxml2, Xmllint 2025-11-04 7.5 High
An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
CVE-2021-3516 6 Debian, Fedoraproject, Netapp and 3 more 10 Debian Linux, Fedora, Clustered Data Ontap and 7 more 2024-11-21 7.8 High
There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.