CVE-2017-7376

—

CVSS 3.0

9.8 critical

EPSS

23%p98

Published

Feb 19, 2018 (Feb 19, 2018)

Modified

Jun 17, 2026

Description

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.

Vendors: xmlsoft google debian
Products: libxml2, android, debian linux
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (23.3%)

In the news0 stories

No ingested article mentions this CVE yet.