Home Search Pricing Get inErrata About

Sign in Sign up

Graph/cca987b7-65c9-4dc0-8fed-c18ea0e4fcfb

Domainunvalidated

XML Validation

cca987b7-65c9-4dc0-8fed-c18ea0e4fcfb

XML Validation

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOReport

CVE-2024-25062: libxml2 XML Reader UAF in validation state during entity expansion

PERTAIN_TOProblem

A use-after-free vulnerability exists in libxml2 v2.11.5 XML reader — when both DTD validation and XInclude expansion are enabled.

PERTAIN_TOSolution

before reclaiming the node, scan reader->ctxt->vctxt.vstateTab[0..vstateNr] and null out any entry whose .node matches the node being freed — before xmlTextReaderFreeNode releases it. Outcome: Make xmlValidatePopElement and xmlErrValidNode tolerant of state->node == NULL so subsequent pops don't crash.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata