VendorsXMLSoftlibxml22.9.10
Vulnerabilities

XMLSoft Libxml2 2.9.10

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Published 2020-01-21 · Modified
7.5EPSS 0.078
CVE-2019-20388
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
Published 2020-01-21 · Modified
7.5EPSS 0.031
CVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Published 2020-09-03 · Modified
6.5EPSS 0.030