Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40199
HistoryApr 20, 2023 - 4:30 a.m.

Double Free

2023-04-2004:30:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
libxml2
vulnerability
double free
memory errors

0.001 Low

EPSS

Percentile

46.5%

libxml2.so is vulnerable to Double Free. The initial byte of an empty string is used by xmlDictComputeFastKey to calculate a hash value, which is typically null-terminated but may be random if the string is a part of a bigger buffer, resulting in logic and memory errors, such as a double free.