CVE-2016-1836
MEDIUMlibxml2 <2.9.4 - Use After Free
Title source: llmDescription
Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
References (34)
... and 14 more
Scores
CVSS v3
5.5
EPSS
0.0115
EPSS Percentile
78.3%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-416
Status
draft
Affected Products (29)
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
debian/debian_linux
apple/iphone_os
< 9.3.2
apple/mac_os_x
< 10.11.5
apple/tvos
< 9.2.1
apple/watchos
< 2.2.1
redhat/enterprise_linux_desktop
redhat/enterprise_linux_desktop
redhat/enterprise_linux_server
redhat/enterprise_linux_server
redhat/enterprise_linux_server_aus
redhat/enterprise_linux_server_aus
... and 14 more
Timeline
Published
May 20, 2016
Tracked Since
Feb 18, 2026