Loading
A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Use CWE-191, Att vendor hub and Xmill product page to widen CVE-2021-21811 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2022-26507, CVE-2021-21828 and CVE-2021-21827 for nearby disclosures in the same product family.