cve/2016/CVE-2016-4483.md
2024-06-18 02:51:15 +02:00

800 B

CVE-2016-4483

Description

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

POC

Reference

Github