An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://sourceforge.net/p/ezxml/bugs/27/ | issue tracking patch exploit third party advisory |
https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html | third party advisory mailing list |