CVE-2022-50999

[CVE catalog]

Severity

High · CVSS 8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Published

Jan 1, 2022, 12:00:00 AM UTC

Updated

Aug 25, 2026, 5:17:03 PM UTC

Source

[NVD] · [CVE record]

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information disclosure, data modification, or denial of service. nokogiri: libxml2: Nokogiri: Integer overflow in libxml2 leads to information disclosure, data modification, or denial of service This is an Important flaw because it can lead to information disclosure, data modification, or denial of service in Red Hat products that process untrusted, specially crafted multi-gigabyte XML files. The integer overflow in the bundled libxml2 library allows an attacker to cause out-of-bounds memory writes, potentially compromising system integrity or availability. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.