cve/2012/CVE-2012-1148.md
2024-06-18 02:51:15 +02:00

741 B

CVE-2012-1148

Description

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.

POC

Reference

Github

No PoCs found on GitHub currently.