CVE-2008-4482: Apache Xerces-C++

High severity, CVSS 7.8. EPSS: 4.2% chance of exploitation in the next 30 days.

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file.

Affected products

• Apache Xerces-C++: up to and including 2.8.0; version 1.0.0 only; version 1.0.1 only; version 1.1.0 only; version 1.2.0 only; version 1.3.0 only; …

Published 2008-10-08. Last modified 2026-06-16.