CVE-2022-40303: exploitation status and patch state
CVE-2022-40303 · CVSS 7.5 HIGH · EPSS 23%
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
Is CVE-2022-40303 exploited?
Not in the CISA KEV catalog.
EPSS puts exploitation in the next 30 days at 23%.
Public exploit code: none found in monitored sources.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2022-40303
PlainSec has not published a story about this CVE.