{"id":"CVE-2022-40304","revision":"37fb5e77afcd471f801b2b26603fa7c8","records":[{"revision":"37fb5e77afcd471f801b2b26603fa7c8","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-40304","aliases":[],"title":"An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.","description":"An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.","state":0,"publishedAt":"2022-11-23T00:00:00+00:00","modifiedAt":"2026-10-14T18:01:41.298+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://gitlab.gnome.org/GNOME/libxml2/-/tags","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213536","https://support.apple.com/kb/HT213535","http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/27"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-40304","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-40304","identifiers":["CVE-2022-40304"]},"retained":false,"historicalAffected":[]}],"coverage":[]}