GCVE - cpe:2.3:a:msweet:mini-xml:2.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:msweet:mini-xml:2.12:*:*:*:*:*:*:*

part: a version: 2.12 update: *

Vendor	Msweet (`f32e402c-f1c3-5d26-be3c-0abb575eb843`)
Product	Mini Xml (`7a73accb-42d6-539c-98c5-7a82c8822164`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/mxml`	purl2cpe	2026-06-01 10:13:27.343295
`pkg:deb/ubuntu/mxml`	purl2cpe	2026-06-01 10:13:27.343297
`pkg:github/michaelrsweet/mxml`	purl2cpe	2026-06-01 10:13:27.343298
`pkg:rpm/fedora/mxml`	purl2cpe	2026-06-01 10:13:27.343300
`pkg:rpm/opensuse/mxml`	purl2cpe	2026-06-01 10:13:27.343302

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-20593`	vulnerable	2026-06-08 05:11:27.603976	Details available In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c. Published: 2018-12-30T18:00:00.000Z Updated: 2024-08-05T12:05:17.654Z Open on db.gcve.eu Reference links https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2987_1.txt.err https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2971_1.txt.err https://github.com/michaelrsweet/mxml/issues/237 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20592`	vulnerable	2026-06-08 05:11:27.603558	Details available In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc. Published: 2018-12-30T18:00:00.000Z Updated: 2024-08-05T12:05:17.643Z Open on db.gcve.eu Reference links https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_1.txt.err https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_2.txt.err https://github.com/michaelrsweet/mxml/issues/237 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20005`	vulnerable	2026-06-08 05:11:26.515076	Details available An issue has been found in Mini-XML (aka mxml) 2.12. It is a use-after-free in mxmlWalkNext in mxml-search.c, as demonstrated by mxmldoc. Published: 2018-12-10T06:00:00.000Z Updated: 2024-08-05T11:51:18.106Z Open on db.gcve.eu Reference links https://github.com/michaelrsweet/mxml/issues/234 https://github.com/fouzhe/security/tree/master/mxml#heap-use-after-free-in-function-mxmlwalknext https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.