Threats tagged 'ghsa-2rm3-qp6x-wxfh'

Mini-XML version 4.0.5 has a memory leak vulnerability in the mxml_load_data() function when parsing malformed XML. The issue occurs because text nodes allocated by mxmlNewText() can become orphaned and not freed during error cleanup, leading to persistent memory leaks. Repeatedly processing specially crafted XML inputs can cause cumulative memory exhaustion and result in denial of service. The vulnerability has a medium severity rating with a CVSS score of 6.5.