Actions
Bug #1214
closed
Unbounded recursion in XMLParser library
Start date:
2026-05-24
Due date:
% Done:
100%
Estimated time:
2:00 h
Module:
ofstd
Operating System:
Compiler:
Description
The methods XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in ofstd/libsrc/ofxml.cc recurse on the stack for each XML nesting level with no depth limit.
Reading an XML file with an extremely high nesting level (60,000 levels) triggers a stack overflow.
This can be demonstrated with the attached PoC file: dcmencap poc.xml poc.dcm
Reported 2026-05-19 by Arjun Basnet, Senior Security Researcher, Securin.
Files
Updated by Marco Eichelberg 1 day ago
- Status changed from New to Closed
- % Done changed from 0 to 100
- Estimated time set to 2:00 h
Closed by commit #d12e350e6.
Updated by Marco Eichelberg about 16 hours ago
This issue has been registered as CVE-2026-44033.
Actions