CVE-2019-19956: Missing Release of Memory after Effective Lifetime

December 24, 2019 (updated July 21, 2021)

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 has a memory leak related to newDoc->oldNs.

References

nvd.nist.gov/vuln/detail/CVE-2019-19956

Detect and mitigate CVE-2019-19956 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →