CVE-2024-34459

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.(CVE-2024-34459)

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

• SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
  • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
  • CVE-2024-34459
• SECURITY UPDATE: use-after-free vulnerability in xinclude.c
  • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
  • CVE-2022-49043
• SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
  • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
  • CVE-2025-24928
• SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
  • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
  • CVE-2025-27113
• SECURITY UPDATE: use-after-free vulnerability in XML schema processing
  • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
  • CVE-2024-56171

• SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
  • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
  • CVE-2024-34459
• SECURITY UPDATE: use-after-free vulnerability in xinclude.c
  • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
  • CVE-2022-49043
• SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
  • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
  • CVE-2025-24928
• SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
  • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
  • CVE-2025-27113
• SECURITY UPDATE: use-after-free vulnerability in XML schema processing
  • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
  • CVE-2024-56171

• CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint
• CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries
• CVE-2026-0989: add RelaxNG include recursion limit
• CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI
• CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing
• CVE-2026-1757: fix memory leak in xmllint interactive shell

• CVE-2023-45322: fix use-after-free in xmlStaticCopyNodeList when copying DTDs
• CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint
• CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell
• CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries
• CVE-2026-0989: add RelaxNG include recursion limit
• CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI
• CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing
• CVE-2026-1757: fix memory leak in xmllint interactive shell

• CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys
• CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory
• CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return
• CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely

• CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys
• CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory
• CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return
• CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely

• CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys
• CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory
• CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return
• CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely

The updated packages fix a security vulnerability: An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. (CVE-2024-34459)

These are all security issues fixed in the libxml2-2-2.12.7-1.1 package on the GA media of openSUSE Tumbleweed.

This update for libxml2 fixes the following issues:

• CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282).

This update for libxml2 fixes the following issues:

• CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282).

This update for libxml2 fixes the following issues:

• CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282).

This update for libxml2 fixes the following issues:

• CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282).

This update for libxml2 fixes the following issues:

• CVE-2024-34459: Fixed buffer over-read in (bsc#1224282)

It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-49043)

It was discovered that the libxml2 xmllint tool incorrectly handled certain memory operations. If a user or automated system were tricked into running xmllint on a specially crafted xml file, a remote attacker could cause xmllint to crash, resulting in a denial of service. (CVE-2024-34459)

It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2022-49043)

It was discovered that the libxml2 xmllint tool incorrectly handled certain memory operations. If a user or automated system were tricked into running xmllint on a specially crafted xml file, a remote attacker could cause xmllint to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-34459)

It was discovered that libxml2 did not properly manage memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-56171)

It was discovered that libxml2 could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-24928)

It was discovered that libxml2 could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-27113)