CVE-2012-5134: Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlie...

Security readout for executives and security teams

CVE-2012-5134 is a memory-handling flaw in libxml2, a common XML parser. A malicious XML document could crash affected software and might allow code execution. It affected libxml2 2.9.0 and earlier, including Google Chrome before 23.0.1271.91 and other products using the library. Exposure is most likely in legacy systems, embedded products, browsers, appliances, or applications that parse untrusted XML using libxml2 2.9.0 or earlier. Modern fully patched operating systems and browsers are less likely exposed, but dependency and vendor packaging checks are necessary. Prioritize remediation for internet-facing or document-processing systems that parse XML. The business risk is higher where untrusted XML can reach legacy software, because the impact includes service outage and possible code execution. No active exploitation evidence is provided, so urgency should be risk-based rather than emergency-only. Mitigation focus: Update libxml2 using vendor advisories for affected operating systems and distributions.; Upgrade Google Chrome to 23.0.1271.91 or later where relevant.; Check Apple, Red Hat, Ubuntu, Debian, and SUSE guidance for packaged fixes..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.