CVE-2024-34393
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published May 2, 2024
Updated: May 3, 2024
Summary
CVE-2024-34393 Introduces a type confusion vulnerability in the libxmljs2 library, which is triggered when processing a maliciously crafted XML. This issue can result in denial of service on both 32-bit and 64-bit systems, data leakage, infinite loops, and potentially remote code execution, specifically on 32-bit systems utilizing the XML_PARSE_HUGE flag.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share