Every CVE Search/ Get API key

OSV-2024-698

Heap-use-after-free in xmlCharEncCloseFunc

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70774

Crash type: Heap-use-after-free READ 4
Crash state:
xmlCharEncCloseFunc
htmlSaveFileFormat
parseAndPrintFile

What each source reports

OSV No score

Heap-use-after-free in xmlCharEncCloseFunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70774

Crash type: Heap-use-after-free READ 4
Crash state:
xmlCharEncCloseFunc
htmlSaveFileFormat
parseAndPrintFile
Record
OSV-2024-698
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libxml2
OSS-Fuzz
Listed versions, plus commit ranges
v2.14.0v2.14.1v2.14.2v2.14.3v2.14.4
Show 7 moreShow less
v2.14.5v2.14.6v2.15.0v2.15.1v2.15.2v2.15.3v2.15.4
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2024-698 is a vulnerability with no CVSS score yet in libxml2, published July 31, 2024. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open