CVE-2022-40304
An issue was discovered in libxml2 before 2.10.3.
Published Nov 23, 2022 · updated Oct 14, 2026 · xmlsoft libxml2
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Timeline
Detection, updates, and resolution for this record.
Nov 23, 2022 · NIST NVD
Detected
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Affected
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/clustered data ontap antivirus connectorversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410c firmwareversion unspecified
- cpe netapp/h410s firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/manageability software development kitversion unspecified
- cpe netapp/smi-s providerversion unspecified
- cpe netapp/snapmanagerversion unspecified
- cpe xmlsoft/libxml2version unspecified
Sources
- CVE.orgCVE-2022-40304
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-40304
30-day exploitation probability 5.8%
first.org - NIST NVDCVE-2022-40304
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
nvd.nist.gov