Skip to content
Heist/ feed
Back to feed
High

libxmljs namespaces type confusion RCE

Type: advisorySources: OSV

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2024-34392
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 18:35 UTC · Revision 1

Source evidence

libxmljs namespaces type confusion RCE

core-osv · Original source

Published 2 May 2024, 18:55 UTC

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.

osv:CVE-2024-34392
Complete source record
{
  "id": "6165629f2f1ead3a1401924d969c9c51787e87f91cb3ec6b21593e41aa7b8686",
  "url": "https://osv.dev/vulnerability/CVE-2024-34392",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "libxmljs namespaces type confusion RCE",
    "summary": "libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.",
    "evidence": "osv:CVE-2024-34392",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-34392",
      "aliases": [
        "CVE-2024-34392",
        "GHSA-mg49-jqgw-gcj6"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/libxmljs/libxmljs",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3121013c0e447d267bf4514317c52ad81670f2f5"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "1.0.11"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "cpe": "cpe:2.3:a:libxmljs_project:libxmljs:*:*:*:*:*:node.js:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "1.0.11"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v1.0.10",
            "v1.0.9",
            "v1.0.8",
            "v1.0.7",
            "v1.0.6",
            "v1.0.2",
            "v1.0.1",
            "v1.0.0",
            "v0.19.10",
            "v0.19.9",
            "v0.19.8",
            "v0.19.7",
            "v0.19.6",
            "v0.19.5",
            "v0.19.4",
            "v0.19.3",
            "v0.19.2",
            "v0.19.0",
            "v0.18.8",
            "v0.18.7",
            "v0.18.6",
            "v0.18.5",
            "v0.18.4",
            "v0.18.3",
            "v0.18.2",
            "v0.18.1",
            "v0.18.0",
            "v0.17.1",
            "v0.17.0",
            "v0.16.1",
            "v0.16.0",
            "v0.15.0",
            "v0.14.3",
            "v0.14.2",
            "v0.14.1",
            "v0.14.0",
            "v0.13.0",
            "v0.12.0",
            "v0.11.1",
            "v0.11.0",
            "v0.10.0",
            "v0.9.0",
            "v0.8.1",
            "v0.8.0",
            "v0.7.0",
            "v0.6.1",
            "v0.6.0",
            "0.5.4",
            "0.5.3",
            "0.5.2",
            "0.5.1",
            "0.5.0",
            "0.4.3",
            "0.4.1",
            "0.4.0",
            "0.3.0",
            "v0.2.0",
            "v0.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-34392.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:31.456666562Z",
      "provider": "osv",
      "references": [
        "https://research.jfrog.com/vulnerabilities/libxmljs-namespaces-type-confusion-rce-jfsa-2024-001034096/",
        "https://www.npmjs.com",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34392.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-34392",
        "https://github.com/libxmljs/libxmljs/issues/646"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-843"
        ],
        "cna_assigner": "JFROG",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34392.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-34392",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 498501,
  "published_at": "2024-05-02T18:55:38.219+00:00"
}