CVE-2018-20004

An issue has been found in Mini-XML (aka mxml) 2.12

published December 10, 2018

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the '<order type="real">' substring, as demonstrated by testmxml.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02025 · 80.7th percentile
Published
2018-12-10T06:00Z
EPSS history
Timeline
  • 10 DEC 06:00Z
    An issue has been found in Mini-XML (aka mxml) 2.12
    cvelistv5