CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL pointer.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-12-31

Last modified

2024-08-05

Weaknesses

CWE-125, CWE-476

Affected products

• Ezxml (Ezxml Project)

References

• https://sourceforge.net/p/ezxml/bugs/18/