Buffer Over-read Vulnerability in Libxml2 Affects Xmllint Tool

CVE-2024-34459

What is CVE-2024-34459?

A vulnerability exists in the xmllint tool, part of the Libxml2 library, which can lead to a buffer over-read when using the --htmlout option. This occurs due to improper formatting of error messages in the xmlHTMLPrintFileContext function, impacting versions before 2.11.8 and 2.12.x prior to 2.12.7. Users are encouraged to update to the latest versions to mitigate potential security risks.

References