-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe provided commit information directly points to the dtdCopy function in xmlparse.c. The patch explicitly adds checks to prevent an integer overflow when calculating the memory size for newE->defaultAtts based on oldE->nDefaultAtts. This confirms that dtdCopy was the function where the integer overflow vulnerability existed prior to the patch.
KEV Misses 88% of Exploited CVEs- Get the report