CVE-2022-40303
When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 41.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 41.37% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- xmlsoft/libxml2 · netapp/active iq unified manager · netapp/clustered data ontap · netapp/clustered data ontap antivirus connector · netapp/netapp manageability sdk · netapp/ontap select deploy administration utility · netapp/snapmanager · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos · netapp/h300s firmware · netapp/h500s firmware · netapp/h700s firmware · netapp/h410s firmware · netapp/h410c firmware
- Source
- cve@mitre.org
EPSS moved from 41.4% on 24 September 2026 to 41.4% on 3 November 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
References
- http://seclists.org/fulldisclosure/2022/Dec/21Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/24Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/25Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0Patch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3Release Notes, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221209-0003/Third Party Advisory
- https://support.apple.com/kb/HT213531Third Party Advisory
- https://support.apple.com/kb/HT213533Third Party Advisory
- https://support.apple.com/kb/HT213534Third Party Advisory
- https://support.apple.com/kb/HT213535Third Party Advisory
- https://support.apple.com/kb/HT213536Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/21Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/24Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/25Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0Patch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3Release Notes, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221209-0003/Third Party Advisory
- https://support.apple.com/kb/HT213531Third Party Advisory
- https://support.apple.com/kb/HT213533Third Party Advisory
- https://support.apple.com/kb/HT213534Third Party Advisory
- https://support.apple.com/kb/HT213535Third Party Advisory
- https://support.apple.com/kb/HT213536Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-337522.html
- https://cert-portal.siemens.com/productcert/html/ssa-341067.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-556635.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.