CVE-2026-110604Published
Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110604 · Microsoft / collected KEV context
cve-program · CVE-2026-110604
- https://hackmd.io/@haind-pwn/mxml-strtod-locale-stack-overflow
- https://github.com/michaelrsweet/mxml/blob/v4.0.6/mxml-file.c#L1860-L1887
- https://github.com/michaelrsweet/mxml/commit/367c7ddd3387f65e867d776216de274bcaa3dae1
- https://www.vulncheck.com/advisories/mini-xml-4.0.0-through-4.0.6-stack-out-of-bounds-write-via-mxml-strtod
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.