Lucene search

K
osvGoogleOSV:CVE-2016-4483
HistoryApr 11, 2017 - 4:59 p.m.

CVE-2016-4483

2017-04-1116:59:00
Google
osv.dev
9

7.4 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

References