Unscored CVE-2021-42860 EUVD-2021-29815GHSA-g69r-p4mx-3r83

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buf…

Published May 26, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification

References

https://github.com/michaelrsweet/mxml/issues/286