An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.
https://sourceforge.net/p/ezxml/bugs/28/
https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html