CVE-2008-4225: Xmlsoft Libxml

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.

Affected products

• Xmlsoft Libxml: version 2.7.2 only

Published 2008-11-25. Last modified 2026-06-16.