CVE-2021-42860: Mini-XML Project Mini-XML

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification

Affected products

• Mini-XML Project Mini-XML: version 3.2 only

Published 2022-05-26. Last modified 2026-06-17.