CVE-2019-20202

Medium

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not…

mitre·CWE-763·Published 2019-12-31

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

194 chars

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.

NVDen

194 chars

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.

Se descubrió un problema en ezXML versiones 0.8.3 hasta la versión 0.8.6. La función ezxml_char_content() intenta utilizar realloc en un bloque que no fue asignado, conllevando a una liberación no válida y a un fallo de segmentación.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H