Skip to content
OpenAdvisories

Package · Debian

mxml

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.6
    CVE-2026-110604

    Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()

    Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, cor…

    Michael R Sweet Mini-XML mxml mxml Debian Ubuntu
  • Low 3.3
    CVE-2026-5037

    mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow

    A vulnerability was determined in mxml up to 4.0.4. This issue affects the function index_sort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restri…

    mxml mxml Debian Ubuntu