CVE-2018-9466

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write

High · published November 19, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Published
2024-11-19T22:21Z
EPSS history
Timeline
  • 19 NOV 22:21Z
    In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write
    cvelistv5