Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-4658

37
FAUCET Score

CVE-2016-4658 is a critical use-after-free and memory corruption vulnerability in libxml2 versions prior to 2.9.5, affecting Apple iOS, OS X, tvOS, and watchOS, among other products. This flaw allows remote attackers to execute arbitrary code or cause a denial of service through a crafted XML document that exploits improper handling of namespace nodes in XPointer ranges. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest.

Impacted Technologies

VendorProductVersion(s)CPE
< 10.0CPE matchmatch criteria
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
< 10.12CPE matchmatch criteria
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
< 10.0CPE matchmatch criteria
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
< 3.0CPE matchmatch criteria
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
< 2.9.5CPE matchmatch criteria
cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
8.63%
Probability of exploitation in next 30 days
EPSS Percentile
94.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0863 is in the 90th percentile among its peer group of 36,821 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libxml2-0:2.9.1-6.el7_9.6
View patch
rubygemspatch availablevia ghsa
Product: nokogiriFixed in: 1.7.1
applevendor investigatingvia nvd_reference
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: libxml2
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: libxml2

Vendor Advisories (2)

rubygemsGHSA-fr52-4hqw-p27fcritical

Nokogiri does not forbid namespace nodes in XPointer ranges

Aug 21, 2018
redhatCVE-2016-4658Moderate

libxml2: Use after free via namespace node in XPointer ranges

Oct 12, 2016

References

lists.apple.com / archives/security-announce/2016/Sep/msg00006.html
Mailing ListVendor Advisory
lists.apple.com / archives/security-announce/2016/Sep/msg00008.html
Mailing ListVendor Advisory
lists.apple.com / archives/security-announce/2016/Sep/msg00010.html
Mailing ListVendor Advisory
lists.apple.com / archives/security-announce/2016/Sep/msg00011.html
Mailing ListVendor Advisory
git.gnome.org / browse/libxml2/commit
PatchThird Party Advisory
security.gentoo.org / glsa/201701-37
Third Party Advisory
support.apple.com / HT207141
Vendor Advisory
support.apple.com / HT207142
Vendor Advisory
support.apple.com / HT207143
Vendor Advisory
support.apple.com / HT207170
Vendor Advisory
securityfocus.com / bid/93054
Third Party AdvisoryVDB Entry
securitytracker.com / id/1036858
Third Party AdvisoryVDB Entry
securitytracker.com / id/1038623
Third Party AdvisoryVDB Entry