High severity7.5NVD Advisory· Published May 26, 2022· Updated Jun 17, 2026

CVE-2021-42860

Description

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mini-XML/Mini-XML
cpe:2.3:a:mini-xml_project:mini-xml:3.2:*:*:*:*:*:*:*
Mini-XML/Mini-XMLdescription
michaelrsweet/mxmlllm-fuzzy
Range: <3.2

Patches

Vulnerability mechanics

References

github.com/michaelrsweet/mxml/issues/286nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000