Back to search
CVE-2016-1834
Published: May 20, 2016
Modified: Dec 4, 2025
PUBLISHED
Description
Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://kc.mcafee.com/corporate/index?page=content&id=SB10170
x_refsource_CONFIRM
RHSA-2016:1292
vendor-advisory
x_refsource_REDHAT
https://support.apple.com/HT206567
x_refsource_CONFIRM
90691
vdb-entry
x_refsource_BID
https://bugzilla.gnome.org/show_bug.cgi?id=763071
x_refsource_CONFIRM
DSA-3593
vendor-advisory
x_refsource_DEBIAN
http://xmlsoft.org/news.html
x_refsource_CONFIRM
APPLE-SA-2016-05-16-4
vendor-advisory
x_refsource_APPLE
USN-2994-1
vendor-advisory
x_refsource_UBUNTU
https://support.apple.com/HT206566
x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-18
x_refsource_CONFIRM
APPLE-SA-2016-05-16-3
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206564
x_refsource_CONFIRM
RHSA-2016:2957
vendor-advisory
x_refsource_REDHAT
1035890
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2016-05-16-2
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206568
x_refsource_CONFIRM
APPLE-SA-2016-05-16-1
vendor-advisory
x_refsource_APPLE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now