Back to search
CVE-2019-20007
Published: Dec 26, 2019
Modified: Aug 5, 2024
PUBLISHED
Description
An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault).
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://sourceforge.net/p/ezxml/bugs/13/
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now