What’s Vulnerable › Vulnerabilities
CVE-2021-42860
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-05-26 · updated 2026-06-17
- Weakness: CWE-772
Description
A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxml_string_getc:2611. NOTE: it is unclear whether this input is allowed by the API specification
Affected products
References
Get alerted when CVE-2021-42860 or the next vulnerability affects your stack