CVE-2021-31229

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant.

• CWE-787

• https://lists.debian.org/debian-lts-announce/2021/07/msg00005.htmlThird Party Advisory
• https://sourceforge.net/p/ezxml/bugs/26/Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/07/msg00005.htmlThird Party Advisory
• https://sourceforge.net/p/ezxml/bugs/26/Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Apr 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31223SES Evolution before 2.1.0 allows reading some parts of a se…5.7
• CVE-2021-31224SES Evolution before 2.1.0 allows duplicating an existing se…3.5
• CVE-2021-31225SES Evolution before 2.1.0 allows deleting some resources no…7.3
• CVE-2021-31226An issue was discovered in HCC embedded InterNiche 4.0.1. A …9.8
• CVE-2021-31227An issue was discovered in HCC embedded InterNiche 4.0.1. A …7.5
• CVE-2021-31228An issue was discovered in HCC embedded InterNiche 4.0.1. Th…7.5
• CVE-2021-31231The Alertmanager in Grafana Enterprise Metrics before 1.2.1 …5.5
• CVE-2021-31232The Alertmanager in CNCF Cortex before 1.8.1 has a local fil…5.5
• CVE-2021-31233SQL Injection vulnerability found in Fighting Cock Informati…7.5
• CVE-2021-31239An issue found in SQLite SQLite3 v.3.35.4 that allows a remo…7.5
• CVE-2021-3124Stored cross-site scripting (XSS) in form field in robust.sy…5.4
• CVE-2021-31240An issue found in libming v.0.4.8 allows a local attacker to…7.8