ZeroDay Findings
Sign inSign up

Findings

CVE-2020-24977

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.

Published Sep 4, 2020 · updated Oct 14, 2026 · xmlsoft libxml2

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 4, 2020 · NIST NVD

    Detected

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

  2. Oct 14, 2026 · NIST NVD

    Updated

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

Affected

  • cpe debian/debian linux9.0
  • cpe fedoraproject/fedora31
  • cpe fedoraproject/fedora32
  • cpe fedoraproject/fedora33
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/hci h410c firmwareversion unspecified
  • cpe opensuse/leap15.1
  • cpe opensuse/leap15.2
  • cpe oracle/communications cloud native core network function cloud native environment1.10.0
  • cpe xmlsoft/libxml22.9.10

Sources

  • CVE.orgVulnerability recordCVE-2020-24977

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2020-24977

    30-day exploitation probability 3.0%

    first.org
  • NIST NVDVulnerability recordCVE-2020-24977

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

    nvd.nist.gov

References