Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28484

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.

Published

2023-04-24T21:15:09.180

Last Modified

2025-05-30T20:15:31.550

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-476
  • Type: Secondary
    CWE-476
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application xmlsoft libxml2 < 2.10.4 Yes
Operating System debian debian_linux 10.0 Yes
References