ZeroDay Findings
Sign inSign up

Findings

CVE-2022-40303

An issue was discovered in libxml2 before 2.10.3.

Published Nov 23, 2022 · updated Oct 14, 2026 · xmlsoft libxml2

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 23, 2022 · NIST NVD

    Detected

    An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.

Affected

  • cpe apple/ipadosversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/clustered data ontapversion unspecified
  • cpe netapp/clustered data ontap antivirus connectorversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/netapp manageability sdkversion unspecified
  • cpe netapp/ontap select deploy administration utilityversion unspecified
  • cpe netapp/snapmanagerversion unspecified
  • cpe xmlsoft/libxml2version unspecified

Sources

  • CVE.orgCVE-2022-40303

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-40303

    An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmen

    nvd.nist.gov

References