CVE-2019-20006

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2019-12-26

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Ezxml (Ezxml Project)

References

• https://sourceforge.net/p/ezxml/bugs/15/