GCVE - cpe:2.3:a:mini-xml_project:mini-xml:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mini-xml_project:mini-xml:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Mini Xml Project (`bdbf7fba-da1f-5e89-b07c-79444ec2ec02`)
Product	Mini Xml (`cba0a4c6-ede1-5966-a18a-3b933e6f0097`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:deb/debian/mxml`	purl2cpe	2026-06-01 10:13:13.069271
`pkg:deb/ubuntu/mxml`	purl2cpe	2026-06-01 10:13:13.069273
`pkg:github/michaelrsweet/mxml`	purl2cpe	2026-06-01 10:13:13.069274
`pkg:rpm/fedora/mxml`	purl2cpe	2026-06-01 10:13:13.069275
`pkg:rpm/opensuse/mxml`	purl2cpe	2026-06-01 10:13:13.069277

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-42860`	vulnerable	2026-06-08 05:35:23.007386	Details available A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification Published: 2022-05-26T11:23:28.000Z Updated: 2024-08-04T03:38:50.237Z Open on db.gcve.eu Reference links https://github.com/michaelrsweet/mxml/issues/286	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42859`	vulnerable	2026-06-08 05:35:23.006877	Details available A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release Published: 2022-05-26T11:02:54.000Z Updated: 2024-08-04T03:38:50.159Z Open on db.gcve.eu Reference links https://github.com/michaelrsweet/mxml/issues/286	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.