CVE-2024-34459 An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in XML Parsing Libraries Two vulnerabilities have been reported in widely used XML parsing libraries. CVE-2024-50602 affects libexpat versions prior to 2.6.4, causing a crash in the XML_ResumeParser function. CVE-2024-34459 impacts xmllint from libxml2 versions before 2.11.8 and 2.12.x before 2.12.7, leading to buffer overflows when formatting error messages. 2 sources 43

Extracted Entities

CVEs (1)

Platforms (2)

Libxml2 Xmllint