medium6.5
CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6.
Impact
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ezxml Project | Ezxml | from 0.8.3 through 0.8.6 |