An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant.
https://sourceforge.net/p/ezxml/bugs/26/
https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html