Approved changes feed: RSS · Atom

cpe:2.3:a:mini-xml_project:mini-xml:2.12:*:*:*:*:*:*:*

part: a version: 2.12 update: *

VendorMini Xml Project (bdbf7fba-da1f-5e89-b07c-79444ec2ec02)
ProductMini Xml (cba0a4c6-ede1-5966-a18a-3b933e6f0097)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mxml purl2cpe 2026-06-01 10:13:13.069184
pkg:deb/ubuntu/mxml purl2cpe 2026-06-01 10:13:13.069185
pkg:github/michaelrsweet/mxml purl2cpe 2026-06-01 10:13:13.069187
pkg:rpm/fedora/mxml purl2cpe 2026-06-01 10:13:13.069188
pkg:rpm/opensuse/mxml purl2cpe 2026-06-01 10:13:13.069189

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20004 vulnerable 2026-06-08 05:11:26.511214 Details available
An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the '<order type="real">' substring, as demonstrated by testmxml.
Published: 2018-12-10T06:00:00.000Z
Updated: 2024-08-05T11:51:18.072Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.