Wind River Support Network

HomeDefectsLIN1021-23340

Acknowledged

LIN1021-23340 : Security Advisory - libxml2 - CVE-2020-24977

Created: Apr 28, 2026 Updated: Apr 30, 2026

Found In Version: 10.21.20.27

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).