Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2 | Aug 22, 2024 | Jul 23, 2016 |
| Amazon Linux Ami 2 | — | Upgrade libxml2-develUpgrade libxml2-debuginfoUpgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2 | Jul 23, 2020 | Jul 23, 2016 |
| Amazon_linux | — | Upgrade libxml2 | Aug 13, 2020 | Jul 23, 2016 |
| Apple Osx Libxml2 | — | Upgrade macOS to the latest version | Nov 11, 2016 | Jul 23, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2016 |
| Centos_linux | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2-debuginfoUpgrade libxml2Upgrade libxml2-devel | Apr 1, 2020 | Jul 23, 2016 |
| Debian | — | Upgrade libxml2 | Aug 1, 2016 | Jul 23, 2016 |
| Freebsd | — | Upgrade chromiumUpgrade chromium-pulseUpgrade chromium-npapi | Dec 10, 2025 | Jul 22, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2.Upgrade www-client/chromium. | Oct 30, 2017 | Jul 23, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 29, 2016 | Jul 20, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | May 2, 2018 | Jul 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2 | Jun 28, 2018 | Jul 23, 2016 |
| Oracle_linux | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2Upgrade libxml2-devel | Oct 5, 2022 | Jul 20, 2016 |
| Redhat_linux | — | No solution existsUpgrade libxml2-staticUpgrade libxml2Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2-debuginfo | Jul 29, 2016 | Jul 23, 2016 |
| Suse | — | Upgrade libxml2-2-32bitUpgrade libxml2-x86Upgrade chromium-desktop-gnomeUpgrade libxml2-pythonUpgrade python-libxml2Upgrade ruby2.5-rubygem-nokogiriUpgrade chromium-ffmpegsumoUpgrade libxml2-32bitUpgrade libxml2-2Upgrade libxml2-docUpgrade libxml2Upgrade chromiumUpgrade libxml2-develUpgrade libxml2-toolsUpgrade libxml2-devel-32bitUpgrade chromium-desktop-kdeUpgrade chromedriver | Jul 26, 2016 | Jul 23, 2016 |
| Ubuntu | — | Upgrade libxml2Upgrade liboxideqtcore0 | Aug 6, 2016 | Jul 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub