CVE-2016-0729
xerces-c: parser crashes on malformed input
Severity
ImportantRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · February 25, 2016
Updated · November 21, 2025
Description
It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an application using Xerces-C for XML processing, a remote attacker could exploit this flaw to cause an application crash or, possibly, execute arbitrary code with the privileges of the application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')