CVE-2022-29824 Integer overflow in n/a

Medium 6.5 Published 3 May 2022 Updated 14 Oct 2026

Integer overflows in libxml2 buffer functions allow out-of-bounds writes when processing crafted multi-gigabyte XML files, potentially leading to code execution or crashes.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2022-29824?

CVE-2022-29824 is a medium-severity vulnerability in Debian Debian Linux, published on 3 May 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.

Weakness: CWE-190

Which versions are affected by CVE-2022-29824?

It affects 19 products.

Linux distribution packages (21)

`libxml2-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:2.9.7-13.el8_6.1`
`libxml2-debugsource` Red Hat:enterprise_linux:8::appstream	All versions	`0:2.9.7-13.el8_6.1`
`libxml2-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:2.9.7-13.el8_6.1`
`python3-libxml2-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:2.9.7-13.el8_6.1`
`libxml2` Red Hat:enterprise_linux:8::baseos	All versions	`0:2.9.7-13.el8_6.1`
`libxml2-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:2.9.7-13.el8_6.1`
`libxml2-debugsource` Red Hat:enterprise_linux:8::baseos	All versions	`0:2.9.7-13.el8_6.1`
`python3-libxml2` Red Hat:enterprise_linux:8::baseos	All versions	`0:2.9.7-13.el8_6.1`
`python3-libxml2-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:2.9.7-13.el8_6.1`
`libxml2-debuginfo` Red Hat:enterprise_linux:9::appstream	All versions	`0:2.9.13-1.el9_0.1`
`libxml2-debugsource` Red Hat:enterprise_linux:9::appstream	All versions	`0:2.9.13-1.el9_0.1`
`libxml2-devel` Red Hat:enterprise_linux:9::appstream	All versions	`0:2.9.13-1.el9_0.1`
`python3-libxml2-debuginfo` Red Hat:enterprise_linux:9::appstream	All versions	`0:2.9.13-1.el9_0.1`
`libxml2` Red Hat:enterprise_linux:9::baseos	All versions	`0:2.9.13-1.el9_0.1`
`libxml2-debuginfo` Red Hat:enterprise_linux:9::baseos	All versions	`0:2.9.13-1.el9_0.1`
`libxml2-debugsource` Red Hat:enterprise_linux:9::baseos	All versions	`0:2.9.13-1.el9_0.1`
`python3-libxml2` Red Hat:enterprise_linux:9::baseos	All versions	`0:2.9.13-1.el9_0.1`
`python3-libxml2-debuginfo` Red Hat:enterprise_linux:9::baseos	All versions	`0:2.9.13-1.el9_0.1`
`libxml2` Rocky Linux:8	All versions	`0:2.9.7-13.el8_6.1`
`libxml2` Rocky Linux:9	All versions	`0:2.9.13-1.el9_0.1`
`libxml2` openSUSE:Tumbleweed	All versions	`2.9.14-1.1`

Products include Debian Debian Linux, Fedoraproject Fedora, Netapp Active Iq Unified Manager, Netapp Clustered Data Ontap, Netapp Clustered Data Ontap Antivirus Connector, Netapp H300s Firmware and 13 more.

How do I fix CVE-2022-29824?

Upgrade to a fixed version.

Is CVE-2022-29824 being exploited?

There is no known exploitation of CVE-2022-29824 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2022-29824, AZL-9616, AZL-9617, CLSA-2022-1657816433, CLSA-2022-1657816650, CLSA-2022-1660064066 and 14 more.