CyberRota Analysis
AI-GeneratedLibxml2 versions prior to 2.15.4 are vulnerable to a NULL pointer dereference in the xmlRegNewParserCtxt function, which occurs following a strdup failure. This flaw could lead to application crashes or unexpected behavior, although it is classified as low severity. Organizations using affected versions of libxml2 should prioritize updating to mitigate potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.