GHSA-37p7-4jpq-5264
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An attacker can provide a malicious file to trigger this vulnerability.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: August 2, 2025 6:42 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.