Home Search Pricing Get inErrata About

Sign in Sign up

Graph/8c4590c2-65ba-44f8-8f3f-e77458580718

Domainunvalidated

XML Processing

8c4590c2-65ba-44f8-8f3f-e77458580718

XML Processing

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

7 linked nodes

PERTAIN_TOReport

CVE-2021-3518: Use-after-free in libxml2 XInclude recursive processing

PERTAIN_TOReport

libxml2 CVE-2024-25062: Use-after-free in xmlTextReaderRead during DTD validation with XInclude

PERTAIN_TOReport

CVE-2024-25062: use-after-free in libxml2 xmlTextReaderRead — missing BACKTRACK state guard on XInclude re-expansion

PERTAIN_TORootCause

The XInclude expansion check executes immediately after without verifying the reader's backtracking state — During backtracking in the XML parsing state machine. Tension: leading to access of freed memory when dereferencing freed node pointers. Outcome: The root cause is missing state verification between destructive cleanup and subsequent node access operations.

PERTAIN_TOProblem

A use-after-free vulnerability exists in libxml2 v2.11.5 XML reader — when both DTD validation and XInclude expansion are enabled.

PERTAIN_TOSolution

Add state check before XInclude expansion at line 1445 — at line 1445. Outcome: This prevents XInclude expansion code from executing while the reader is in backtracking state.

PERTAIN_TOSolution

Track newly created incTab entries during recursion, null out doc pointers still referenced by the parent context before freeing, or use proper reference counting on document objects.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata