CVSS 3.1 Score 8.1 of 10 (high)


Published May 2, 2024
Updated: May 3, 2024


CVE-2024-34391 is a type confusion vulnerability found in libxmljs, impacting both 32-bit and 64-bit systems. This vulnerability occurs when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. It can potentially lead to denial of service, data leak, infinite loop, and remote code execution on 32-bit systems with the XML_PARSE_HUGE flag enabled. The base severity of this vulnerability is rated as HIGH with a CVSS score of 8.1. No user interaction or privileges are required for exploitation, and it can be exploited over the network. The impact includes high integrity and confidentiality impacts, with availability also being affected. It is recommended to apply the necessary patches or updates provided by the vendor to remediate this vulnerability and mitigate potential dangers to an organization's systems and data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-34391 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options