XML Parse Buffer Vulnerability

CVE-2024-45490

What is CVE-2024-45490?

A vulnerability detected in libexpat prior to version 2.6.3 relates to XML parsing inaccuracies within the xmlparse.c file. The flaw arises because the XML_ParseBuffer function fails to appropriately handle negative lengths, potentially leading to undefined behavior during XML processing. This weakness could be exploited by attackers to cause program crashes or other undesirable behaviors when parsing maliciously crafted XML data.

News Articles

Forbes

CVE-2024-45490

iOS 18.2—Update Now Warning Issued To All iPhone Users

Apple has issued iOS 18.2, along with the first major Apple Intelligence features and 21 updates you should apply to your iPhone now. Here's what you need to know.

References