CVE-2019-20005 | BDVDB-2026-128262 Detail

Description#

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished).

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-12-26Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.