TI-2026-76283 CVE-2026-112094 · GHSA-2m37-39hv-427w
Use after free in michaelrsweet mxml mxml_load_data
Priority MEDIUM 56
A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6.
Vulnerabilities
3 records
TI-2026-74098 CVE-2026-110604 · GHSA-pc2v-ppxx-vfq5
Off-by-one stack out-of-bounds write in Mini-XML mxml_strtod()
Priority MEDIUM 44
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'.
TI-2026-53919 CVE-2026-77220 · GHSA-2fr4-jfvm-chmp
PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting
Priority LOW 32
PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value.