CVE-2019-20006

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault.

• CWE-416

• https://sourceforge.net/p/ezxml/bugs/15/Exploit, Third Party Advisory
• https://sourceforge.net/p/ezxml/bugs/15/Exploit, Third Party Advisory

Published

Dec 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20000The malware scan function in BullGuard Premium Protection 20…5.9
• CVE-2019-20001An issue was discovered in RICOH Streamline NX Client Tool a…7.8
• CVE-2019-20002Formula Injection exists in the export feature in SolarWinds…7.8
• CVE-2019-20003Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 all…6.1
• CVE-2019-20004An issue was discovered on Intelbras IWR 3000N 1.8.7 devices…8.8
• CVE-2019-20005An issue was discovered in ezXML 0.8.3 through 0.8.6. The fu…6.5
• CVE-2019-20007An issue was discovered in ezXML 0.8.2 through 0.8.6. The fu…6.5
• CVE-2019-20008In Archery before 1.3, inserting an XSS payload into a proje…5.4
• CVE-2019-20009An issue was discovered in GNU LibreDWG before 0.93. Crafted…6.5
• CVE-2019-2001The permissions on /proc/iomem were world-readable. This cou…
• CVE-2019-20010An issue was discovered in GNU LibreDWG 0.92. There is a use…8.8
• CVE-2019-20011An issue was discovered in GNU LibreDWG 0.92. There is a hea…8.8