CVE-2026-110604
LowCVSS 3.6Summary
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the process.
Risk Assessment
An attacker can corrupt stack memory or crash an application processing crafted XML, potentially leading to code execution or denial of service. The risk affects applications using Mini-XML in environments with non-English locales.
Recommendation
Update Mini-XML to a version newer than 4.0.6 once a fix is available. Until then, avoid processing untrusted XML data in environments with non-English locales.
Other vulnerabilities in Mini-XML
Original NVD description (English source)
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS