Logic Error Vulnerability in libxml2 Affecting Multiple Platforms

CVE-2022-40304

What is CVE-2022-40304?

A flaw was identified in libxml2 versions before 2.10.3, where certain invalid XML entity definitions could lead to corruption of a hash table key. This situation can result in unpredictable logic errors within applications utilizing the library. In specific scenarios, this flaw may also trigger a double-free condition, posing risks to software stability and security.

References