Geoffrey Humphreys

**Name of the Vulnerable Software and Affected Versions** libxml2 versions 2.9.11 through 2.11.0 **Description** A Use After Free issue exists in the `xmlParseInternalSubset()` function of libxml2. This occurs due to improper entity resolution handling, which allows a remote attacker to cause a denial-of-service by providing maliciously crafted XML input. Use After Free is a memory corruption flaw where a program continues to use a pointer after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.