Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxml:2.7.2:*:*:*:*:*:*:*

part: a version: 2.7.2 update: *

VendorXmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881)
ProductLibxml (f89c0642-2788-525e-bd8d-9155e2e32eaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxml++2.6 purl2cpe 2026-06-01 10:12:19.573748
pkg:gitlab/gnome/libxml2 purl2cpe 2026-06-01 10:12:19.573749
pkg:maven/com.viliussutkus89.licenseonly/libxml purl2cpe 2026-06-01 10:12:19.573751
pkg:nuget/libxml2 purl2cpe 2026-06-01 10:12:19.573752

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4226 vulnerable 2026-06-08 04:50:38.302110 Details available
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
Published: 2008-11-25T23:00:00.000Z
Updated: 2024-08-07T10:08:34.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4225 vulnerable 2026-06-08 04:50:38.300919 Details available
Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
Published: 2008-11-25T23:00:00.000Z
Updated: 2024-08-07T10:08:35.001Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.