Apache Xerces C
By the Year
In 2022 there have been 0 vulnerabilities in Apache Xerces C . Xerces C did not have any published security vulnerabilities last year.
It may take a day or so for new Xerces C vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apache Xerces C Security Vulnerabilities
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs
8.1 - High
- December 18, 2019
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths
9.8 - Critical
- March 01, 2018
In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.
NULL Pointer Dereference