Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2 | Aug 22, 2024 | Jul 23, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2 | Jul 23, 2020 | Jul 23, 2016 |
| Amazon_linux | — | Upgrade libxml2 | Aug 13, 2020 | Jul 23, 2016 |
| Apple Osx Libxml2 | — | Upgrade macOS to the latest version | Nov 11, 2016 | Jul 23, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2016 |
| Centos_linux | — | Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2Upgrade libxml2-develUpgrade libxml2-debuginfo | Apr 1, 2020 | Jul 23, 2016 |
| Debian | — | Upgrade libxml2 | Aug 1, 2016 | Jul 23, 2016 |
| Freebsd | — | Upgrade chromium-pulseUpgrade chromiumUpgrade chromium-npapi | Dec 10, 2025 | Jul 22, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2.Upgrade www-client/chromium. | Oct 30, 2017 | Jul 23, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 29, 2016 | Jul 20, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libxml2Upgrade libxml2-develUpgrade libxml2-python | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2 | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Jun 28, 2018 | Jul 23, 2016 |
| Oracle_linux | — | Upgrade libxml2-develUpgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2 | Oct 5, 2022 | Jul 20, 2016 |
| Redhat_linux | — | Upgrade libxml2Upgrade libxml2-staticNo solution existsUpgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-python | Jul 29, 2016 | Jul 23, 2016 |
| Suse | — | Upgrade chromiumUpgrade chromium-desktop-kdeUpgrade libxml2-devel-32bitUpgrade libxml2-develUpgrade libxml2-toolsUpgrade chromedriverUpgrade python-libxml2Upgrade chromium-desktop-gnomeUpgrade libxml2-32bitUpgrade libxml2-2-32bitUpgrade libxml2-docUpgrade libxml2-x86Upgrade libxml2-pythonUpgrade libxml2Upgrade chromium-ffmpegsumoUpgrade libxml2-2Upgrade ruby2.5-rubygem-nokogiri | Jul 26, 2016 | Jul 23, 2016 |
| Ubuntu | — | Upgrade libxml2Upgrade liboxideqtcore0 | Aug 6, 2016 | Jul 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub