CVE-2024-34459: Xmlsoft LIBXML2

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Affected products

• Xmlsoft LIBXML2: before 2.11.8 (fixed in 2.11.8); from 2.12.0, before 2.12.7 (fixed in 2.12.7)

Published 2024-05-14. Last modified 2026-06-17.