CVE-2026-7310CWE-122

A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw

Medium · published May 26, 2026

CVSS v4.0
4.4
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

A heap-based buffer overflow vulnerability exists in XML

parser functionality in the HiDraw. An authenticated

malicious user with local access can exploit this

vulnerability using a specially crafted XML file which may

lead to memory corruption and potential arbitrary code

execution. Successful exploitation could result in

application crashes (denial of service) and compromise the

confidentiality and integrity of the affected system.

The record
Technical detail
CVSS v4.0
4.4 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-05-26T11:43Z
EPSS history
Timeline
  • 26 MAY 11:43Z
    A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw
    cvelistv5