libxml2 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libxml2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M NULL Pointer Dereference	*
H Release of Invalid Pointer or Reference	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e2
H Incorrect Resource Transfer Between Spheres	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
H Integer Coercion Error	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
H Heap-based Buffer Overflow	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
L Unchecked Return Value	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
H Stack-based Buffer Overflow	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
H Integer Overflow or Wraparound	<2.12.7+dfsg+really2.9.14-2.1+deb13u3
H Integer Overflow or Wraparound	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
M Out-of-bounds Read	<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1
L Stack-based Buffer Overflow	<2.12.7+dfsg+really2.9.14-2.1+deb13u2+e7
C Out-of-bounds Read	<2.9.14+dfsg-1.3~deb12u3
H Expired Pointer Dereference	<2.12.7+dfsg+really2.9.14-2.1+deb13u2
C Expired Pointer Dereference	<2.9.14+dfsg-1.3~deb12u3
H Out-of-bounds Read	<2.9.14+dfsg-1.3~deb12u2
H Unchecked Return Value	<2.9.14+dfsg-1.3~deb12u2
H NULL Pointer Dereference	<2.9.14+dfsg-1.3~deb12u2
L CVE-2025-26434	<2.12.7+dfsg+really2.9.14-2.1+deb13u2
H CVE-2025-24928	<2.9.14+dfsg-1.3~deb12u2
H Use After Free	<2.12.7+dfsg+really2.9.14-2.1+deb13u2
C CVE-2024-56171	<2.9.14+dfsg-1.3~deb12u2
L CVE-2024-34459	<2.9.14+dfsg-1.3~deb12u2
H Use After Free	<2.9.14+dfsg-1.3~deb12u2
M Use After Free	<2.9.14+dfsg-1.3~deb12u2
M Out-of-Bounds	<2.9.14+dfsg-1.3~deb12u2
M Double Free	<2.9.14+dfsg-1.2
M NULL Pointer Dereference	<2.9.14+dfsg-1.2
H CVE-2022-49043	<2.9.14+dfsg-1.3~deb12u2
H Double Free	<2.9.14+dfsg-1.1
H Integer Overflow or Wraparound	<2.9.14+dfsg-1.1
M Integer Overflow or Wraparound	<2.9.14+dfsg-1
H Use After Free	<2.9.13+dfsg-1
M Out-of-bounds Read	<2.9.10+dfsg-6.2
H Memory Leak	<2.9.10+dfsg-2.1
H Memory Leak	<2.9.10+dfsg-2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.10+dfsg-2
H NULL Pointer Dereference	<2.9.10+dfsg-2
M Allocation of Resources Without Limits or Throttling	<2.9.10+dfsg-2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.10+dfsg-2
C Out-of-Bounds	<2.9.4+dfsg1-3.1
H Use After Free	<2.9.4+dfsg1-5.2
H Access of Resource Using Incompatible Type ('Type Confusion')	<2.12.7+dfsg+really2.9.14-2.1+deb13u2
L CVE-2026-6653	<2.12.7+dfsg+really2.9.14-2.1+deb13u2+e8
M Memory Leak	<2.9.14+dfsg-1.3~deb12u6
L Resource Exhaustion	<2.9.14+dfsg-1.3~deb12u6
M Uncontrolled Recursion	<2.9.14+dfsg-1.3~deb12u6
L Uncontrolled Recursion	<2.9.14+dfsg-1.3~deb12u6
M CVE-2025-9714	<2.9.14+dfsg-1.3~deb12u5
L Improper Resource Shutdown or Release	<2.9.14+dfsg-1.3~deb12u6
L Stack-based Buffer Overflow	<2.9.14+dfsg-1.3~deb12u3
H Out-of-bounds Write	<2.9.14+dfsg-1.3~deb12u3
H NULL Pointer Dereference	<2.9.14+dfsg-1.3~deb12u1
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<2.9.10+dfsg-6.7
M NULL Pointer Dereference	<2.9.10+dfsg-6.6
H Use After Free	<2.9.10+dfsg-6.6
H Out-of-bounds Write	<2.9.10+dfsg-6.6
H Use After Free	<2.9.10+dfsg-6.6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.10+dfsg-2.1
H Out-of-bounds Read	<2.9.4+dfsg1-3.1
H Out-of-bounds Read	<2.9.4+dfsg1-3.1
H Out-of-Bounds	<2.9.4+dfsg1-3.1
H Out-of-Bounds	<2.9.4+dfsg1-3.1
C Out-of-bounds Read	<2.9.4+dfsg1-6.1
C Out-of-Bounds	<2.9.4+dfsg1-3.1
C XML External Entity (XXE) Injection	<2.9.4+dfsg1-3.1
M NULL Pointer Dereference	<2.9.4+dfsg1-5.1
H Out-of-bounds Write	<2.9.4+dfsg1-5.1
H Out-of-bounds Write	<2.9.4+dfsg1-3.1
M XML External Entity (XXE) Injection	<2.9.10+dfsg-2
H Use After Free	<2.9.4+dfsg1-2.1
C Out-of-Bounds	<2.9.4+dfsg1-2.1
H Deserialization of Untrusted Data	<2.9.3+dfsg1-1.1
H Improper Input Validation	<2.9.3+dfsg1-1.1
C Use of Externally-Controlled Format String	<2.9.4+dfsg1-1
H Out-of-Bounds	<2.9.3+dfsg1-1.1
M Cross-site Scripting (XSS)	<2.9.12+dfsg-3
H Improper Input Validation	<2.9.3+dfsg1-1.1
H Uncontrolled Recursion	<2.9.3+dfsg1-1.1
M Out-of-Bounds	<2.9.3+dfsg1-1.1
H Out-of-Bounds	<2.9.3+dfsg1-1.1
M Out-of-bounds Read	<2.9.3+dfsg1-1.1
M Out-of-bounds Read	<2.9.3+dfsg1-1.1
M Use After Free	<2.9.3+dfsg1-1.1
M Use After Free	<2.9.3+dfsg1-1.1
H Out-of-Bounds	<2.9.3+dfsg1-1.1
H Out-of-Bounds	<2.9.3+dfsg1-1.1
M Out-of-bounds Read	<2.9.3+dfsg1-1.1
H Out-of-Bounds	<2.9.3+dfsg1-1.1
H CVE-2015-8806	<2.9.3+dfsg1-1.1
C Out-of-Bounds	<2.9.2+really2.9.1+dfsg1-0.1
M Out-of-Bounds	<2.9.2+zdfsg1-4
M Out-of-Bounds	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.3+dfsg1-1
L Resource Management Errors	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.2+really2.9.1+dfsg1-0.1
M Out-of-Bounds	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.3+dfsg1-1
M Out-of-Bounds	<2.9.3+dfsg1-1
M Resource Management Errors	<2.9.3+dfsg1-1
M Resource Management Errors	<2.9.2+really2.9.1+dfsg1-0.1
M CVE-2014-3660	<2.9.2+dfsg1-1
M CVE-2014-0191	<2.9.1+dfsg1-4
M Out-of-Bounds	<2.9.1+dfsg1-1
M Access Restriction Bypass	<2.8.0+dfsg1-7+nmu1
M Out-of-Bounds	<2.8.0+dfsg1-7+nmu1
M Out-of-Bounds	<2.8.0+dfsg1-7
M Numeric Errors	<2.8.0+dfsg1-5
M Resource Management Errors	<2.7.8.dfsg-8
H Out-of-bounds Write	<2.7.8.dfsg-7
M Out-of-bounds Read	<2.7.8.dfsg-5.1
M Numeric Errors	<2.7.8.dfsg-9.1
M Double Free	<2.7.8.dfsg-5
H Double Free	<2.7.8.dfsg-5
H Numeric Errors	<2.7.8.dfsg-3
H Numeric Errors	<2.7.8.dfsg-5.1
H Double Free	<2.7.8.dfsg-2
M Out-of-Bounds	<2.7.8.dfsg-1
M Use After Free	<2.7.3.dfsg-2.1
M Out-of-Bounds	<2.7.3.dfsg-2.1
C Resource Management Errors	<2.6.32.dfsg-5
H Numeric Errors	<2.6.32.dfsg-5
C Out-of-Bounds	<2.6.32.dfsg-4
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<2.6.32.dfsg-3
M Resource Management Errors	<2.6.30.dfsg-3.1
C CVE-2004-0989	<2.6.11-5
H CVE-2004-0110	<2.6.6-1

Vulnerability

Vulnerable Version

NULL Pointer Dereference

Release of Invalid Pointer or Reference

<2.12.7+dfsg+really2.9.14-2.1+deb13u3+e2

Incorrect Resource Transfer Between Spheres