CVE-2024-34459

PoC —

CVSS 3.1

7.5 high

EPSS

2%p82

Published

May 14, 2024 (May 14, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Vendors: xmlsoft
Products: libxml2
Weakness: CWE-122
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.