{"id":"CVE-2022-40303","revision":"20ebcca7c5954a0dac5853ca8da67774","records":[{"revision":"20ebcca7c5954a0dac5853ca8da67774","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-40303","aliases":[],"title":"An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2…","description":"An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.","state":0,"publishedAt":"2022-11-22T00:00:00+00:00","modifiedAt":"2026-10-14T17:52:39.602+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213536","https://support.apple.com/kb/HT213535","http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/27"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-40303","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-40303","identifiers":["CVE-2022-40303"]},"retained":false,"historicalAffected":[]}],"coverage":[]}