Detections
Analytics
CVE-2021-31348
medium
Description
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).
References
https://sourceforge.net/p/ezxml/bugs/27/
https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html