Buffer Overflow Vulnerability in Raptor RDF Syntax Library by Raptor

CVE-2017-18926

What is CVE-2017-18926?

The vulnerability in the Raptor RDF Syntax Library arises from the function raptor_xml_writer_start_element_common, which incorrectly calculates the maximum number of namespace declarations for the XML writer. This miscalculation can lead to heap-based buffer overflows, particularly observable in the raptor_qname_format_as_xml function. Such vulnerabilities pose a significant risk as they can be exploited to execute arbitrary code, leading to potential compromise of the system running the affected library.

References