XMLSoft — security advisories

3 advisorieslatest 2026-08-06⚡ RSS feed

Tracked XMLSoft products:

⚡ Watch XMLSoft

Get an email when a new XMLSoft advisory drops — max one per day, one-click unsubscribe.

CVE-2023-39615: Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

mediumCVSS 6.5CVE-2023-39615msrc2026-08-06

mediumCVSS 6.9CVE-2026-56406msrc2026-06-09

mediumCVSS 6.5CVE-2026-56409msrc2026-06-09