Heap-based Buffer Overflow in libxml2 Affecting Apple iOS and OS X
CVE-2016-1834
7.8HIGH
Key Information:
- Vendor
Canonical
- Status
- Vendor
- CVE Published:
- 20 May 2016
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2016-1834?
A heap-based buffer overflow vulnerability in the xmlStrncat function in libxml2 versions prior to 2.9.4 allows attackers to exploit weakly validated XML documents. This vulnerability enables remote actors to execute arbitrary code or instigate a denial of service through crafted XML input, impacting affected Apple products such as iOS and OSX. Security patches are critical for mitigating associated risks of memory corruption and unauthorized access.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.