Threats tagged 'ghsa-qv28-p6jq-5h3f'

An out-of-bounds read vulnerability exists in the Guththila XML parser wrapper used by Apache Axis2/C. When processing certain malformed XML inputs, the parser may read memory beyond the bounds of a lookup table, potentially causing incorrect parsing or process crashes. This can be triggered by an unauthenticated client sending crafted XML requests. The vulnerability affects Apache Axis2/C versions through 2.0.0. Fixes have been committed and will be included in the next release.