[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9pTvf8KLLaqXaoN_DrayqBszCjXF_93FAONl1W6XlOs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":102,"topProductsByCves":103,"seoMetadata":108,"meta":117},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":38},36103,"xmlsoft",4,127,0,294,"2025-09-10","x",[16,21,27,33],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},174223,"libxml2",182,99,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},174224,"libxslt",85,25,"2025-07-10",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},174222,"libxml",27,8,"2015-08-14",{"id":34,"product_name":35,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":37},174225,"xmllint",1,"2021-06-01","Xmlsoft is a technology vendor with 4 tracked products and 127 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[40,49,55,62,69,75,80,85,91,96],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":48},"CVE-2022-40303","An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.","2022-11-23",7.5,"v3.1","High",false,0.41365,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":44,"cvssVersion":53,"severity":46,"isKev":47,"epssScore":54},"CVE-2004-0110","Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.","2004-03-15","v2",0.24232,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":53,"severity":60,"isKev":47,"epssScore":61},"CVE-2008-3529","Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.","2008-09-12",10,"Critical",0.23373,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":60,"isKev":47,"epssScore":68},"CVE-2017-7376","Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.","2018-02-19",9.8,"v3.0",0.22981,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":74},"CVE-2021-3518","There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.","2021-05-18",8.8,0.21859,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":59,"cvssVersion":53,"severity":60,"isKev":47,"epssScore":79},"CVE-2004-0989","Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.","2005-03-01",0.21686,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":73,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":84},"CVE-2021-30560","Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-08-03",0.17634,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":90},"CVE-2021-3517","There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.","2021-05-19",8.6,0.16986,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":44,"cvssVersion":67,"severity":46,"isKev":47,"epssScore":95},"CVE-2016-4447","The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.","2016-06-09",0.1398,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":53,"severity":60,"isKev":47,"epssScore":101},"CVE-2011-1944","Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.","2011-09-02",9.3,0.13432,[],[104,105,106,107],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":37},{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Xmlsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xmlsoft covering 4 products with 127 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xmlsoft vulnerabilities, Xmlsoft security, Xmlsoft CVE, Xmlsoft threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":113,"@type":114,"name":115,"description":110,"url":116},"https:\u002F\u002Fschema.org","Organization","Xmlsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fxmlsoft",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":118,"apiVersion":119},"2026-10-17T10:40:17.087Z","3.0"]