CVE-2022-49043

The libxml2 library, specifically versions up to 2.10.x, contains a use-after-free flaw in the xmlXIncludeAddNode function within the xinclude.c file. This flaw can potentially lead to remote code execution. The affected versions are all libxml2 versions before 2.11.0. An exploit for this issue is available, allowing for potential remote code execution. It is recommended to update libxml2 to version 2.11.0 or later to prevent potential remote code execution. More information about this issue can be found at https://t.co/PiPDOx4jnd and https://t.co/NOrljIDevR. #libxml2 #xmlXIncludeAddNode #useafterfree #remoteCodeExecution #InfoSec #CriticalVulnerability #libxml2vulnerability #xmlvulnerability