CVE-2016-1837

Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS…

published May 20, 2016

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04446 · 91.3th percentile
Published
2016-05-20T10:00Z
EPSS history
Timeline
  • 20 MAY 10:00Z
    Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS…
    cvelistv5