CVE-2008-4226: Xmlsoft Libxml

High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

Affected products

• Xmlsoft Libxml: version 2.7.2 only

Published 2008-11-25. Last modified 2026-06-16.