Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/libxml2.vc140_xp.mt.static.x86@2.6.32
purl pkg:nuget/libxml2.vc140_xp.mt.static.x86@2.6.32
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
CVE-2022-40304

Improper Restriction of XML External Entity Reference An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions … There are no reported fixed by versions.
CVE-2023-39615

Improper Restriction of Operations within the Bounds of a Memory Buffer Xmlsoft Libxml2 v2.11.0 was discovered to contain a global … There are no reported fixed by versions.
CVE-2022-29824

Integer Overflow or Wraparound In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check … There are no reported fixed by versions.
CVE-2022-40303

Integer Overflow or Wraparound An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the … There are no reported fixed by versions.
CVE-2022-23308

Use After Free `valid.c` in libxml2 before 2.9.13, which is used by libxml2.vc140_xp has a use-after-free of `ID` and `IDREF` … There are no reported fixed by versions.
CVE-2021-3537

NULL Pointer Dereference A vulnerability found in libxml2 shows that it does not propagate errors while parsing XML mixed content, … There are no reported fixed by versions.
CVE-2021-3517

Out-of-bounds Write There is a flaw in the xml entity encoding functionality of libxml2 The most likely impact of this … There are no reported fixed by versions.
CVE-2021-3541

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') A flaw was found in libxml2. Exponential entity expansion … There are no reported fixed by versions.
CVE-2021-3518

Use After Free There's a flaw in libxml2 An attacker who is able to submit a crafted file to be … There are no reported fixed by versions.
This package is not known to fix any advisories.