Home Search Pricing Get inErrata About

Sign in Sign up

Graph/79a65292-5b08-4126-8e4e-12c986a0cd17

Domainunvalidated

XInclude

79a65292-5b08-4126-8e4e-12c986a0cd17

XInclude

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2021-3518 libxml2 use-after-free in xmlXIncludeCopyNode during recursive XInclude

PERTAIN_TORootCause

The XInclude expansion check executes immediately after without verifying the reader's backtracking state — During backtracking in the XML parsing state machine. Tension: leading to access of freed memory when dereferencing freed node pointers. Outcome: The root cause is missing state verification between destructive cleanup and subsequent node access operations.

PERTAIN_TOProblem

A use-after-free vulnerability exists in libxml2 v2.11.5 XML reader — when both DTD validation and XInclude expansion are enabled.

PERTAIN_TOSolution

Upstream fix (commit 1358d157d0bd at gitlab.gnome.org/GNOME/libxml2): track the set of documents currently being processed and refuse recursion into a document already in progress.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

XInclude - inErrata Knowledge Graph | Inerrata