Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2 | Aug 22, 2024 | Jul 23, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libxml2-develUpgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2-pythonUpgrade libxml2 | Jul 23, 2020 | Jul 23, 2016 |
| Amazon_linux | — | Upgrade libxml2 | Aug 13, 2020 | Jul 23, 2016 |
| Apple Osx Libxml2 | — | Upgrade macOS to the latest version | Nov 11, 2016 | Jul 23, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2016 |
| Centos_linux | — | Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2Upgrade libxml2-develUpgrade libxml2-debuginfo | Apr 1, 2020 | Jul 23, 2016 |
| Debian | — | Upgrade libxml2 | Aug 1, 2016 | Jul 23, 2016 |
| Freebsd | — | Upgrade chromium-pulseUpgrade chromiumUpgrade chromium-npapi | Dec 10, 2025 | Jul 22, 2016 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade dev-libs/libxml2. | Oct 30, 2017 | Jul 23, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 29, 2016 | Jul 20, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-python | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-python | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-python | Jun 28, 2018 | Jul 23, 2016 |
| Oracle_linux | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2-devel | Oct 5, 2022 | Jul 20, 2016 |
| Redhat_linux | — | Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2-debuginfoUpgrade libxml2-staticNo solution existsUpgrade libxml2 | Jul 29, 2016 | Jul 23, 2016 |
| Suse | — | Upgrade chromiumUpgrade libxml2-devel-32bitUpgrade libxml2-develUpgrade chromium-desktop-kdeUpgrade chromedriverUpgrade libxml2-toolsUpgrade libxml2-pythonUpgrade libxml2-32bitUpgrade libxml2-docUpgrade ruby2.5-rubygem-nokogiriUpgrade chromium-ffmpegsumoUpgrade python-libxml2Upgrade libxml2-2Upgrade libxml2Upgrade libxml2-2-32bitUpgrade libxml2-x86Upgrade chromium-desktop-gnome | Jul 26, 2016 | Jul 23, 2016 |
| Ubuntu | — | Upgrade libxml2Upgrade liboxideqtcore0 | Aug 6, 2016 | Jul 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub