Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Nathan Wachholz

Researcher fromGoogle Project Zero
#35044of 60,399
8.5Total CVSS
Vulnerabilities · 1
PT-2022-5386
2022-06-22
8.5
CVE-2022-40304
Libxml2
Libxml2
An issue was discovered in libxml2 where certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked, which may allow a remote attacker to cause a denial of service. The vulnerability is related to the handling of objects with a dict structure, where the value of the first byte is zero. This issue can be exploited by a remote attacker to cause a denial of service.