CVE-2022-49043

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

In libxml2 before 2.11.0, xmlXIncludeAddNode in xinclude.c has a use-after-free vulnerability.

An attacker could exploit this to execute arbitrary code or crash applications processing XML.

Update libxml2 to version 2.11.0 or later.

Original NVD description (English source)

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.