# Xmlsoft Libxml2


- [CVE-2008-3529](https://insights.sbomify.com/CVE-2008-3529/): Memory corruption in n/a (critical 10.0)
- [CVE-2004-0989](https://insights.sbomify.com/CVE-2004-0989/): Memory corruption in n/a (critical 10.0)
- [CVE-2017-7375](https://insights.sbomify.com/CVE-2017-7375/): XML external entity in n/a (critical 9.8)
- [CVE-2017-7376](https://insights.sbomify.com/CVE-2017-7376/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-16931](https://insights.sbomify.com/CVE-2017-16931/): XML external entity in n/a (critical 9.8)
- [CVE-2016-4658](https://insights.sbomify.com/CVE-2016-4658/): Nokogiri does not forbid namespace nodes in XPointer ranges (critical 9.8)
- [CVE-2016-4448](https://insights.sbomify.com/CVE-2016-4448/): Other in n/a (critical 9.8)
- [CVE-2015-8710](https://insights.sbomify.com/CVE-2015-8710/): Memory corruption in n/a (critical 9.8)
- [CVE-2011-1944](https://insights.sbomify.com/CVE-2011-1944/): Integer overflow in n/a (critical 9.3)
- [CVE-2024-40896](https://insights.sbomify.com/CVE-2024-40896/): XML external entity in libxml2 (critical 9.1)
- [CVE-2017-8872](https://insights.sbomify.com/CVE-2017-8872/): Information disclosure in n/a (critical 9.1)
- [CVE-2021-3518](https://insights.sbomify.com/CVE-2021-3518/): Nokogiri Implements libxml2 version vulnerable to use-after-free (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/xmlsoft/libxml2/