CVE-2015-0252: Apache Xerces-C++

Medium severity, CVSS 5.0. EPSS: 39.7% chance of exploitation in the next 30 days.

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.

Affected products

• Apache Xerces-C++: up to and including 3.1.1
• Debian Debian Linux: version 7.1 only
• Fedoraproject Fedora: version 20 only; version 21 only; version 22 only

Published 2015-03-24. Last modified 2026-06-17.