CVE-2024-34391

Summary

CVE-2024-34391 is a type confusion vulnerability affecting the libxmljs library. This issue arises when parsing a maliciously crafted XML input, leading to unintended behavior while invoking a function on the parsed node's attrs(). The consequences can include denial of service, data leaks, infinite loops, and even remote code execution on 32-bit systems using the XML_PARSE_HUGE flag.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.