CVEvulnerability
CVE-2021-42859
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-772
Description
A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release
Affected configurations
• mini-xml project mini-xml 3.2
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- https://github.com/michaelrsweet/mxml/issues/286 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/michaelrsweet/mxml/issues/286 Exploit, Issue Tracking, Third Party Advisory