CVE-2023-39615

Summary

CVE-2023-39615 is a newly discovered vulnerability affecting version 2.11.0 of Libxml2 in Xmlsoft. This issue stems from an out-of-bounds read vulnerability located in the xmlSAX2StartElement() function, found at /libxml2/SAX2.c. An attacker can exploit this weakness by providing a specially crafted XML file, leading to a Denial of Service (DoS) condition. Despite the vendor's statement that the product does not support the legacy SAX1 interface with custom callbacks, the vulnerability results in a crash even when no crafted input is present.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.