CVE-2021-31348

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).

Date published : 2021-04-16

https://sourceforge.net/p/ezxml/bugs/27/

https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html