NuytsTech Security

CVE-2021-30485

by ·

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrect memory handling, leading to a NULL pointer dereference while running strcmp() on a NULL pointer.

Date published : 2021-04-11

https://sourceforge.net/p/ezxml/bugs/25/

https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html

Tags: