CVE-2021-3518

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.11

Description The issue is related to a use-after-free flaw in the xinclude.c component of the libxml2 library, which can be triggered by a specially crafted file. This can allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. The flaw affects confidentiality, integrity, and availability.

Recommendations For versions prior to 2.9.11, update to version 2.9.11 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted files by applications linked with libxml2 until a patch is available.