AIKIDO-2026-33398

TL;DR

Ox parses and serializes XML through a C extension that mishandles many untrusted-input conditions across its SAX parser, object-mode loader, dumper, builder, base64 decoder, and name cache. Crafted XML or object-mode documents trigger stack and heap buffer overflows, out-of-bounds reads and writes, use-after-free and double-free conditions, reads of uninitialized memory, and hash-flooding, and a document can force a default load into object mode. Before the fix these conditions let untrusted input corrupt process memory, disclose adjacent memory, crash the process, or instantiate unexpected objects. The fix adds bounds and size validation, element depth and nesting limits, safe allocation and free handling, per-process name-cache seeding, and stricter object-mode selection.