CVE-2026-110604Published
Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110604 · Microsoft / collected KEV context
cve-program · CVE-2026-110604
- https://hackmd.io/@haind-pwn/mxml-strtod-locale-stack-overflow
- https://github.com/michaelrsweet/mxml/blob/v4.0.6/mxml-file.c#L1860-L1887
- https://github.com/michaelrsweet/mxml/commit/367c7ddd3387f65e867d776216de274bcaa3dae1
- https://www.vulncheck.com/advisories/mini-xml-4.0.0-through-4.0.6-stack-out-of-bounds-write-via-mxml-strtod
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.