CyberRota Analysis
AI-GeneratedThe vulnerability in libxml2 allows for negative lengths to be passed to write callbacks due to an integer overflow check omission in the xmlOutputWriteCallback and xmlBufUse functions. This can lead to potential data corruption or denial of service in applications that rely on these callbacks for XML processing. Organizations using libxml2 versions prior to 2.15.4 should prioritize patching to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.
Related CVEs
Other vulnerabilities affecting the same vendor(s)