Every CVE Search/ Get API key

OSV-2021-1076

UNKNOWN READ in ParseXMLElement

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36671

Crash type: UNKNOWN READ
Crash state:
ParseXMLElement
prvTidyParseXMLDocument
prvTidyDocParseStream

What each source reports

OSV No score

UNKNOWN READ in ParseXMLElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36671

Crash type: UNKNOWN READ
Crash state:
ParseXMLElement
prvTidyParseXMLDocument
prvTidyDocParseStream
Record
OSV-2021-1076
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
tidy-html5
OSS-Fuzz
Listed versions, plus commit ranges
5.9.14-next5.9.8-next5.9.9-next
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-1076 is a vulnerability with no CVSS score yet in tidy-html5, published July 31, 2021. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open