CVE WatchOct 14, 2026

CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling

CVSS

9.8

Critical

EPSS

23.0%

p98

KEV

—

Exploit Today

0-100

Published: Feb 19, 2018 · Last modified: Oct 14, 2026 · CWE-119

EPSS · 30d

23.0%EPSS · 30 days23.3%

2026-09-242026-10-23

Technical description

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.

Official references

www.securityfocus.comhttp://www.securityfocus.com/bid/98877
www.securitytracker.comhttp://www.securitytracker.com/id/1038623
android.googlesource.comhttps://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1462216
git.gnome.orghttps://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e
source.android.comhttps://source.android.com/security/bulletin/2017-06-01
www.debian.orghttps://www.debian.org/security/2017/dsa-3952
www.securityfocus.comhttp://www.securityfocus.com/bid/98877
www.securitytracker.comhttp://www.securitytracker.com/id/1038623
android.googlesource.comhttps://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1462216
git.gnome.orghttps://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e
source.android.comhttps://source.android.com/security/bulletin/2017-06-01
www.debian.orghttps://www.debian.org/security/2017/dsa-3952
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-957213.3 LOW

0.2%

——0No description provided5h CVE-2026-957204.4 MED

1.1%

——0No description provided5h CVE-2026-957146.8 MED

7.6%

——2No description provided5h CVE-2026-957137.0 HIG

6.5%

——2No description provided5h CVE-2026-957107.1 HIG

7.7%

——2No description provided4h CVE-2026-957077.2 HIG

29.4%

——9No description provided4h