CVE-2024-34459

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Affected products

Alt Linux, Debian, Linuxmint, Red Os, Rocky Linux, Suse, Ubuntu, Libxml2

Xmlsoft libxml2

< 2.11.8, 2.12.7

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

2.3% (82th percentile)

Weakness

CWE-122

NVD status

Modified

Published

2024-05-13

No exploit for CVE-2024-34459 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.