CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2

published May 26, 2022

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01037 · 63.6th percentile
Published
2022-05-26T11:23Z
EPSS history
Timeline
  • 26 MAY 11:23Z
    A stack buffer overflow exists in Mini-XML v3.2
    cvelistv5