CVE-2024-34459 Information

Description

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint –htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Reference

https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7 https://gitlab.gnome.org/GNOME/libxml2/-/issues/720