VDB

GCVE-110-MAGEIA-2024-172

GCVE-110-MAGEIA-2024-172
Advisory Published
Vulnetix · Advisory published May 9, 2024
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. (CVE-2024-25062)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibxml20 (affected), 2.10.4-1.3.mga9 (unaffected), 0 (affected), 2.10.4-1.3.mga9 (unaffected)—
Mageiapulseaudio0 (affected), 16.1-17.mga9 (unaffected)—

Aliases

CVE-2024-25062

References

Updated libxml2 packages fix a security vulnerability
advisory
Updated libxml2 packages fix a security vulnerability
issue
Updated libxml2 packages fix a security vulnerability
issue
Updated pulseaudio packages fix bugs
advisory
Updated pulseaudio packages fix bugs
issue
Updated pulseaudio packages fix bugs
issue

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›