Vulnerabilities > CVE-2024-25062 - Use After Free vulnerability in Xmlsoft Libxml2

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

xmlsoft

CWE-416

NVD

Published: 2024-02-04

Updated: 2024-11-21

Summary

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Vulnerable Configurations

Part	Description	Count
Application	Xmlsoft Xmlsoft Libxml2 2.12.0 Xmlsoft Libxml2 2.12.1 Xmlsoft Libxml2 2.12.2 Xmlsoft Libxml2 2.12.3 Xmlsoft Libxml2 2.12.4 Xmlsoft Libxml2 - Xmlsoft Libxml2 1.7.0 Xmlsoft Libxml2 1.7.1 Xmlsoft Libxml2 1.7.2 Xmlsoft Libxml2 1.7.3 Xmlsoft Libxml2 1.7.4 Xmlsoft Libxml2 1.8.0 Xmlsoft Libxml2 1.8.1 Xmlsoft Libxml2 1.8.2 Xmlsoft Libxml2 1.8.3 Xmlsoft Libxml2 1.8.4 Xmlsoft Libxml2 1.8.5 Xmlsoft Libxml2 1.8.6 Xmlsoft Libxml2 1.8.7 Xmlsoft Libxml2 1.8.9 Xmlsoft Libxml2 1.8.10 Xmlsoft Libxml2 1.8.13 Xmlsoft Libxml2 1.8.14 Xmlsoft Libxml2 1.8.16 Xmlsoft Libxml2 2.0.0 Xmlsoft Libxml2 2.1.0 Xmlsoft Libxml2 2.1.1 Xmlsoft Libxml2 2.2.0 Xmlsoft Libxml2 2.2.1 Xmlsoft Libxml2 2.2.2 Xmlsoft Libxml2 2.2.3 Xmlsoft Libxml2 2.2.4 Xmlsoft Libxml2 2.2.5 Xmlsoft Libxml2 2.2.6 Xmlsoft Libxml2 2.2.7 Xmlsoft Libxml2 2.2.8 Xmlsoft Libxml2 2.2.9 Xmlsoft Libxml2 2.2.10 Xmlsoft Libxml2 2.2.11 Xmlsoft Libxml2 2.3.0 Xmlsoft Libxml2 2.3.1 Xmlsoft Libxml2 2.3.2 Xmlsoft Libxml2 2.3.3 Xmlsoft Libxml2 2.3.4 Xmlsoft Libxml2 2.3.5 Xmlsoft Libxml2 2.3.6 Xmlsoft Libxml2 2.3.7 Xmlsoft Libxml2 2.3.8 Xmlsoft Libxml2 2.3.9 Xmlsoft Libxml2 2.3.10 Xmlsoft Libxml2 2.3.11 Xmlsoft Libxml2 2.3.12 Xmlsoft Libxml2 2.3.13 Xmlsoft Libxml2 2.3.14 Xmlsoft Libxml2 2.4.1 Xmlsoft Libxml2 2.4.2 Xmlsoft Libxml2 2.4.3 Xmlsoft Libxml2 2.4.4 Xmlsoft Libxml2 2.4.5 Xmlsoft Libxml2 2.4.6 Xmlsoft Libxml2 2.4.7 Xmlsoft Libxml2 2.4.8 Xmlsoft Libxml2 2.4.9 Xmlsoft Libxml2 2.4.10 Xmlsoft Libxml2 2.4.11 Xmlsoft Libxml2 2.4.12 Xmlsoft Libxml2 2.4.13 Xmlsoft Libxml2 2.4.14 Xmlsoft Libxml2 2.4.15 Xmlsoft Libxml2 2.4.16 Xmlsoft Libxml2 2.4.17 Xmlsoft Libxml2 2.4.18 Xmlsoft Libxml2 2.4.19 Xmlsoft Libxml2 2.4.20 Xmlsoft Libxml2 2.4.21 Xmlsoft Libxml2 2.4.22 Xmlsoft Libxml2 2.4.23 Xmlsoft Libxml2 2.4.24 Xmlsoft Libxml2 2.4.25 Xmlsoft Libxml2 2.4.26 Xmlsoft Libxml2 2.4.27 Xmlsoft Libxml2 2.4.28 Xmlsoft Libxml2 2.4.29 Xmlsoft Libxml2 2.4.30 Xmlsoft Libxml2 2.5.0 Xmlsoft Libxml2 2.5.1 Xmlsoft Libxml2 2.5.2 Xmlsoft Libxml2 2.5.3 Xmlsoft Libxml2 2.5.4 Xmlsoft Libxml2 2.5.5 Xmlsoft Libxml2 2.5.6 Xmlsoft Libxml2 2.5.7 Xmlsoft Libxml2 2.5.8 Xmlsoft Libxml2 2.5.9 Xmlsoft Libxml2 2.5.10 Xmlsoft Libxml2 2.5.11 Xmlsoft Libxml2 2.6.0 Xmlsoft Libxml2 2.6.1 Xmlsoft Libxml2 2.6.2 Xmlsoft Libxml2 2.6.3 Xmlsoft Libxml2 2.6.4 Xmlsoft Libxml2 2.6.5 Xmlsoft Libxml2 2.6.6 Xmlsoft Libxml2 2.6.7 Xmlsoft Libxml2 2.6.8 Xmlsoft Libxml2 2.6.9 Xmlsoft Libxml2 2.6.10 Xmlsoft Libxml2 2.6.11 Xmlsoft Libxml2 2.6.12 Xmlsoft Libxml2 2.6.13 Xmlsoft Libxml2 2.6.14 Xmlsoft Libxml2 2.6.15 Xmlsoft Libxml2 2.6.16 Xmlsoft Libxml2 2.6.17 Xmlsoft Libxml2 2.6.18 Xmlsoft Libxml2 2.6.19 Xmlsoft Libxml2 2.6.20 Xmlsoft Libxml2 2.6.21 Xmlsoft Libxml2 2.6.22 Xmlsoft Libxml2 2.6.23 Xmlsoft Libxml2 2.6.24 Xmlsoft Libxml2 2.6.25 Xmlsoft Libxml2 2.6.26 Xmlsoft Libxml2 2.6.27 Xmlsoft Libxml2 2.6.28 Xmlsoft Libxml2 2.6.29 Xmlsoft Libxml2 2.6.30 Xmlsoft Libxml2 2.6.31 Xmlsoft Libxml2 2.6.32 Xmlsoft Libxml2 2.7.0 Xmlsoft Libxml2 2.7.1 Xmlsoft Libxml2 2.7.2 Xmlsoft Libxml2 2.7.3 Xmlsoft Libxml2 2.7.4 Xmlsoft Libxml2 2.7.5 Xmlsoft Libxml2 2.7.6 Xmlsoft Libxml2 2.7.7 Xmlsoft Libxml2 2.7.8 Xmlsoft Libxml2 2.8.0 Xmlsoft Libxml2 2.9.0 Xmlsoft Libxml2 2.9.1 Xmlsoft Libxml2 2.9.2 Xmlsoft Libxml2 2.9.3 Xmlsoft Libxml2 2.9.4 Xmlsoft Libxml2 2.9.5 Xmlsoft Libxml2 2.9.6 Xmlsoft Libxml2 2.9.7 Xmlsoft Libxml2 2.9.8 Xmlsoft Libxml2 2.9.9 Xmlsoft Libxml2 2.9.10 Xmlsoft Libxml2 2.9.11 Xmlsoft Libxml2 2.9.12 Xmlsoft Libxml2 2.9.13 Xmlsoft Libxml2 2.9.14 Xmlsoft Libxml2 2.10.0 Xmlsoft Libxml2 2.10.1 Xmlsoft Libxml2 2.10.2 Xmlsoft Libxml2 2.10.3 Xmlsoft Libxml2 2.10.4 Xmlsoft Libxml2 2.11.0 Xmlsoft Libxml2 2.11.1 Xmlsoft Libxml2 2.11.2 Xmlsoft Libxml2 2.11.3 Xmlsoft Libxml2 2.11.4 Xmlsoft Libxml2 2.11.5	192

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References