Launchpad.net

CVE 2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

CVE-2016-4448 (Candidate) is related to these bugs:

Bug #1652325: Libxml2 2.9.3 fails to parse multi-byte character in large CDATA section that is split across buffer

		In	Importance	Status
1652325	Libxml2 2.9.3 fails to parse multi-byte character in large CDATA section that is split across buffer	libxml2 (Ubuntu)	Undecided	Invalid
1652325	Libxml2 2.9.3 fails to parse multi-byte character in large CDATA section that is split across buffer	libxml2	Medium	Fix Released
1652325	Libxml2 2.9.3 fails to parse multi-byte character in large CDATA section that is split across buffer	libxml2 (Ubuntu Xenial)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.