Libxml2 XmlParseEndTag2 Heap-Based Buffer Overread

A crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of latest stable libxml2 (2.9.3, released 4 days ago), by feeding a malformed file to xmllint.

Leave a Reply