[jira] [Created] (XERCESC-2266) Bugs in grammar deserialization from cache

Scott Cantor created XERCESC-2266:
-------------------------------------

             Summary: Bugs in grammar deserialization from cache
                 Key: XERCESC-2266
                 URL: https://issues.apache.org/jira/browse/XERCESC-2266
             Project: Xerces-C++
          Issue Type: Bug
    Affects Versions: 3.3.0
            Reporter: Scott Cantor
             Fix For: 3.3.1


Various bugs identified in the grammar cache that can be exploited to cause type confusion and other issues if the binary grammar representations on disk were manipulated to exploit them. Only a trusted actor could perform such manipulation, not through XML or DTD inputs.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)