ZeroDay Findings
Sign inSign up

Findings

CVE-2022-23308

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Published Feb 26, 2022 · updated Oct 14, 2026 · xmlsoft libxml2

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 26, 2022 · NIST NVD

    Detected

    valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

  2. Oct 14, 2026 · NIST NVD

    Updated

    valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Affected

  • cpe apple/ipadosversion unspecified
  • cpe apple/iphone osversion unspecified
  • cpe apple/mac os xversion unspecified
  • cpe apple/mac os x10.15.7
  • cpe debian/debian linux9.0
  • cpe fedoraproject/fedora34
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/bootstrap osversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe xmlsoft/libxml2version unspecified

Sources

References