← All advisories

Medium severity5.5OSV Advisory· Published Dec 10, 2018· Updated Jun 17, 2026

CVE-2018-20005

CVE-2018-20005

Description

An issue has been found in Mini-XML (aka mxml) 2.12. It is a use-after-free in mxmlWalkNext in mxml-search.c, as demonstrated by mxmldoc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

User Attachments/FilesOSV
Range: v2.11, v2.12
Msweet/Mini XML
cpe:2.3:a:msweet:mini-xml:2.12:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
michaelrsweet/mxmlllm-fuzzy
Range: <=2.12

Patches

Vulnerability mechanics

References

4

github.com/fouzhe/security/tree/master/mxmlnvdExploitThird Party Advisory
github.com/michaelrsweet/mxml/issues/234nvdIssue TrackingThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N53IJHDYR5HVQLKH4J6B27OEQLGKSGY5/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNWF6BAU7S42O4LE4B74KIMHFE2HDNMI/nvd

News mentions

0

No linked articles in our index yet.