HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3

HCL BigFix Platform contains a vulnerability in its XML processing library (xerces-c++) that allows remote attackers to send specially crafted HTTP requests, causing the software to access memory outside safe boundaries and potentially crash or leak data.

An integer overflow vulnerability in xerces-c++ 3.2.3 used by BigFix Platform enables remote attackers to trigger out-of-bounds memory access through malformed HTTP requests without authentication. The vulnerability affects XML parsing operations and can result in denial of service or information disclosure.