{"id":"CVE-2022-29824","revision":"bef424470e0446db8e0ea26444e1a10c","records":[{"revision":"bef424470e0446db8e0ea26444e1a10c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-29824","aliases":[],"title":"In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, mult…","description":"In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.","state":0,"publishedAt":"2022-05-03T00:00:00+00:00","modifiedAt":"2026-10-14T16:29:18.083+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://gitlab.gnome.org/GNOME/libxslt/-/tags","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/","https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/","https://www.debian.org/security/2022/dsa-5142","https://www.oracle.com/security-alerts/cpujul2022.html","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html","https://security.netapp.com/advisory/ntap-20220715-0006/","https://security.gentoo.org/glsa/202210-03","http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-29824","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-29824","identifiers":["CVE-2022-29824"]},"retained":false,"historicalAffected":[]}],"coverage":[]}