Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2 | Aug 22, 2024 | Jul 23, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2-devel | Jul 23, 2020 | Jul 23, 2016 |
| Amazon_linux | — | Upgrade libxml2 | Aug 13, 2020 | Jul 23, 2016 |
| Apple Osx Libxml2 | — | Upgrade macOS to the latest version | Nov 11, 2016 | Jul 23, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2016 |
| Centos_linux | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-debuginfoUpgrade libxml2-pythonUpgrade libxml2-static | Apr 1, 2020 | Jul 23, 2016 |
| Debian | — | Upgrade libxml2 | Aug 1, 2016 | Jul 23, 2016 |
| Freebsd | — | Upgrade chromiumUpgrade chromium-pulseUpgrade chromium-npapi | Dec 10, 2025 | Jul 22, 2016 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade dev-libs/libxml2. | Oct 30, 2017 | Jul 23, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 29, 2016 | Jul 20, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libxml2-pythonUpgrade libxml2Upgrade libxml2-devel | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Jun 28, 2018 | Jul 23, 2016 |
| Oracle_linux | — | Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2Upgrade libxml2-static | Oct 5, 2022 | Jul 20, 2016 |
| Redhat_linux | — | Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2No solution exists | Jul 29, 2016 | Jul 23, 2016 |
| Suse | — | Upgrade libxml2-docUpgrade libxml2Upgrade python-libxml2Upgrade libxml2-2Upgrade libxml2-x86Upgrade libxml2-pythonUpgrade libxml2-32bitUpgrade chromium-ffmpegsumoUpgrade chromium-desktop-gnomeUpgrade libxml2-2-32bitUpgrade ruby2.5-rubygem-nokogiriUpgrade libxml2-devel-32bitUpgrade libxml2-develUpgrade chromedriverUpgrade chromiumUpgrade libxml2-toolsUpgrade chromium-desktop-kde | Jul 26, 2016 | Jul 23, 2016 |
| Ubuntu | — | Upgrade liboxideqtcore0Upgrade libxml2 | Aug 6, 2016 | Jul 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub