libxml2 Use-After-Free Vulnerability in xmlXIncludeAddNode Function

A use-after-free vulnerability has been identified in libxml2 versions prior to 2.11.0, specifically within the xmlXIncludeAddNode function in xinclude.c. This vulnerability can be exploited by manipulating XML data to create a memory management issue, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes a heap-based use-after-free condition, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by using a PHP script that creates a large string and replaces a portion of an XML file with this string. When the DOM XMLDocument processes the modified XML, the use-after-free vulnerability is triggered.

Remediation

Users should upgrade to libxml2 version 2.11.0 or later, where this vulnerability has been fixed.