ZeroDay Findings
Sign inSign up

Findings

CVE-2016-5131

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly h…

Published Jul 23, 2016 · updated Oct 14, 2026 · google chrome

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 23, 2016 · NIST NVD

    Detected

    Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

Affected

  • cpe apple/iphone osversion unspecified
  • cpe apple/mac os xversion unspecified
  • cpe apple/tvosversion unspecified
  • cpe apple/watchosversion unspecified
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe debian/debian linux8.0
  • cpe google/chromeversion unspecified
  • cpe opensuse/leap42.1
  • cpe redhat/enterprise linux desktop6.0
  • cpe xmlsoft/libxml2version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2016-5131

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2016-5131

    30-day exploitation probability 2.3%

    first.org
  • NIST NVDVulnerability recordCVE-2016-5131

    Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

    nvd.nist.gov

References