CVE-2015-8710
libxml2: out-of-bounds memory access when parsing an unclosed HTML comment
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · April 19, 2015
Updated · May 15, 2026
Description
It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.8AV:N/AC:M/Au:N/C:P/I:N/A:P
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer