PT-2025-46051 · Julia · Xml2 Jll

Publicado 2025-10-17 · Atualizado 2025-10-17

OSV

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML PARSE HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Identificadores relacionados

JLSEC-2025-77

Produtos afetados

Xml2 Jll

Referências · 14

• https://support.apple.com/kb/HT213535 · Nota
• https://support.apple.com/kb/HT213531 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/24 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/25 · Nota
• https://support.apple.com/kb/HT213534 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-77 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20221209-0003 · Nota
• https://support.apple.com/kb/HT213533 · Nota
• https://support.apple.com/kb/HT213536 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/21 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/27 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/26 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3 · Nota