OSV-2024-198.yaml

id: OSV-2024-198
summary: Heap-use-after-free in xmlCopyPropInternal
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67586

  ```
  Crash type: Heap-use-after-free READ 8
  Crash state:
  xmlCopyPropInternal
  xmlCopyPropList
  xmlStaticCopyNode
  ```
modified: '2024-03-25T00:05:53.628547Z'
published: '2024-03-25T00:05:53.628217Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67586
affected:
- package:
    name: libxml2
    ecosystem: OSS-Fuzz
    purl: pkg:generic/libxml2
  ranges:
  - type: GIT
    repo: https://gitlab.gnome.org/GNOME/libxml2.git
    events:
    - introduced: 577e2516d0ed3669c7e9879ba9f04214658bfd1b
    - fixed: ad9a5637f9fa35dc380d0718af3c8c1a81f6c0b0
  ecosystem_specific:
    severity: HIGH
  database_specific:
    introduced_range: a279aae30f6c4d488f40b39e80087518b5459ea4:d4d1f3f33d6d4a5e31511281637a857944946e65
    fixed_range: d4d1f3f33d6d4a5e31511281637a857944946e65:ad9a5637f9fa35dc380d0718af3c8c1a81f6c0b0
  versions: []
schema_version: 1.6.0