CVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.
Published Sep 4, 2020 · updated Oct 14, 2026 · xmlsoft libxml2
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Timeline
Detection, updates, and resolution for this record.
Sep 4, 2020 · NIST NVD
Detected
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Oct 14, 2026 · NIST NVD
Updated
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Affected
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora31
- cpe fedoraproject/fedora32
- cpe fedoraproject/fedora33
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/hci h410c firmwareversion unspecified
- cpe opensuse/leap15.1
- cpe opensuse/leap15.2
- cpe oracle/communications cloud native core network function cloud native environment1.10.0
- cpe xmlsoft/libxml22.9.10
Sources
- CVE.orgCVE-2020-24977
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-24977
30-day exploitation probability 3.0%
first.org - NIST NVDCVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
nvd.nist.gov