It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710
