### [CVE-2021-42860](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42860) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) ### Description A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification ### POC #### Reference - https://github.com/michaelrsweet/mxml/issues/286 #### Github No PoCs found on GitHub currently.