← Database

CVE-2021-3518

HIGH CVSS: 8.8 Published: 2021-05-18 Modified: 2026-06-17

Description

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

Affected Platforms

Oracle Real User Experience InsightXmlsoft Libxml2Debian Debian LinuxNetapp Clustered Data OntapRedhat Jboss Core ServicesOracle Enterprise Manager Ops CenterNetapp Ontap Select Deploy Administration UtilityOracle Peoplesoft Enterprise PeopletoolsOracle Mysql WorkbenchRedhat Enterprise Linux

Weakness Type

CWE-416, CWE-416

References