QID 354929

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the nextl macro calls the xmlparserhandlepereference function in the case of a % character in a dtd name. (
( CVE-2017-16931) gnome project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlencodeentitiesinternal at libxml2/entities.c.
The issue has been fixed in commit 50f06b3e. (
( CVE-2020-24977) theres a flaw in libxml2s xmllint.
An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free.
The greatest impact of this flaw is to confidentiality, integrity, and availability. (
( CVE-2021-3516) there is a flaw in the xml entity encoding functionality of libxml2.
An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read.
The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application. (
( CVE-2021-3517) theres a flaw in libxml2.
An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free.
The greatest impact from this flaw is to confidentiality, integrity, and availability. (
( CVE-2021-3518) a null pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing xml mixed content.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.