Use-after-free vulnerability in libxml2 through 2.9.4 as used in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.