CVE-2021-26221: Ezxml Project Ezxml

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.

Affected products

• Ezxml Project Ezxml: up to and including 0.8.6

Published 2021-02-08. Last modified 2026-06-17.