Use-After-Free Vulnerability in libxml2 Affects GNOME Products

CVE-2022-49043

What is CVE-2022-49043?

The vulnerability resides in the xmlXIncludeAddNode function within the xinclude.c file of libxml2 prior to version 2.11.0. This issue can lead to exploitation through improper memory management, resulting in a use-after-free scenario. Attackers could potentially execute arbitrary code or crash applications utilizing this library, emphasizing the need for timely updates to secure environments.

References