CVE-2021-3537

A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in recovery mode and post validated. The highest threat from this vulnerability is to system availability.

For the flaw to be exploitable, the document must be parsed in recovery mode and post validated (e.g.: when used in the xmlling tool, both -recover and -postvalid options must be used for the flaw to be exploitable)

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.