Approved changes feed: RSS · Atom
cpe:2.3:a:lexbor:lexbor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lexbor (864c0d94-0520-58db-b1c1-ddb9c5e76390) |
|---|---|
| Product | Lexbor (995bd736-00a2-5f90-876e-66d68892a103) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lexbor/lexbor |
purl2cpe | 2026-06-01 10:16:49.613185 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29079 |
vulnerable | 2026-06-08 07:55:16.089861 |
Type Confusion in Lexbor Fragment Parser
Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting the qualified_name field. That corrupted value is later used as a pointer and dereferenced near the zero page. This vulnerability is fixed in 2.7.0.
Published: 2026-03-13T17:19:46.025Z
Updated: 2026-03-16T17:05:28.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29078 |
vulnerable | 2026-06-08 07:55:16.089487 |
Integer Underflow in Lexbor ISO‑2022‑JP Encoder
Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx->buffer_used -= size with a stale size = 3 causes an integer underflow that wraps to SIZE_MAX. Afterwards, memcpy is called with a negative length, leading to an out‑of‑bounds read from the stack and an out‑of‑bounds write to the heap. The source data is partially controllable via the contents of the DOM tree. This vulnerability is fixed in 2.7.0.
Published: 2026-03-13T17:18:47.646Z
Updated: 2026-03-16T17:05:52.178Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.