← Database

CVE-2022-40303

HIGH CVSS: 7.5 Published: 2022-11-23 Modified: 2026-06-17

Description

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Affected Platforms

Xmlsoft Libxml2Netapp H300S FirmwareApple TvosNetapp Clustered Data OntapApple Iphone OsNetapp H700SApple MacosNetapp Ontap Select Deploy Administration UtilityNetapp H410SNetapp H410S Firmware

Weakness Type

CWE-190, CWE-190

References